Trojan

Trojan.Agent.CQSQ removal tips

Malware Removal

The Trojan.Agent.CQSQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CQSQ virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Exhibits behavior characteristic of Nymaim malware
  • Zeus P2P (Banking Trojan)
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

fghcyboi.net
pprwbplg.pw
ncjadd.pw
hqqvtfnaef.in
dfhdjgzas.in
qweevywsubg.com
xkzlg.net
yrrnsdhkw.com
zrhheeisuvo.pw
kzzgkbyeeg.pw
nattyy.net
ltvevaiw.pw
nqbwqexb.in
xtkdhkpmo.com
xdcxtmpgj.in
slkgi.in
mpokonqkt.com
fisolo.pw
sekzyddc.net
iunvcjhcbmq.net
nalbvlqewoq.com
zfswlyen.pw
wngaifjyunw.pw
lcppnuieqco.net
zxnxr.com
jsxubtipn.net
jvyalnfpjuuq.pw
nsgmxmdg.net
immdcrmokys.pw
tdrkwoytwjbn.pw
uposuonsej.com
lbgyulfw.com
nhpjax.net
vayvcbnwipy.com
fyxvbeifeia.in
sjtawnla.net
rkpahfxpke.com
aztdjb.net
pfeonacqwpzv.com
bhsudywxmcgu.com
bbaryfnqqxkj.pw
mvkgtq.com
hlkxhbd.in
cofviscy.net
zusvmduwjpf.pw
zvgmb.in
gdhvwe.net
kalzlkwc.in
lgqzvwxu.pw
pamcr.pw

How to determine Trojan.Agent.CQSQ?


File Info:

crc32: 746FE736
md5: 9d50c53b9e61b4d6bcd4f7e9ec3fd880
name: 9D50C53B9E61B4D6BCD4F7E9EC3FD880.mlw
sha1: 9987ba598d6ff8c81264c3063adb20e4a160a27b
sha256: ddc7b759b073f51bb67c41aacf0b55fe0167fd6bce7f8ada45d9b828f72c269f
sha512: 5279c717f58d5dce7b3d0e62d028813b3cdc1b4dbae908022a277af31f290aff903c3fcc997b0a9c87c431235f7b5515cf4d82f716c53d9f586dbe80b9f84135
ssdeep: 12288:6Pp2/MsnFMFsNi+igDHwpKjnwXAQNcGitu8tEechZgeW66tKuB5:6x2ksnJY+ZDHwNXAQNbSqeBeW665
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.CQSQ also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Inject2.63259
MicroWorld-eScanTrojan.Agent.CQSQ
FireEyeGeneric.mg.9d50c53b9e61b4d6
CAT-QuickHealRansom.Cerber.ZZ4
McAfeeTrojan-FOIZ!9D50C53B9E61
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.Agent.CQSQ
K7GWTrojan ( 0051b2281 )
K7AntiVirusTrojan ( 0051b2281 )
BitDefenderThetaGen:NN.ZexaF.34804.MuW@aSAtqGi
CyrenW32/Nymaim.CI.gen!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Banker.Win32.GozNym.pef
AlibabaTrojanDownloader:Win32/Kryptik.e04eb06f
NANO-AntivirusTrojan.Win32.Kryptik.evcope
TencentMalware.Win32.Gencirc.10b36e91
Ad-AwareTrojan.Agent.CQSQ
TACHYONTrojan/W32.Agent.634880.PM
EmsisoftTrojan.Agent.CQSQ (B)
ComodoTrojWare.Win32.Crypt.C@7vajd0
F-SecureHeuristic.HEUR/AGEN.1111254
ZillyaTrojan.Kryptik.Win32.1303614
McAfee-GW-EditionBehavesLike.Win32.Trojan.jc
SophosMal/Generic-S + Mal/Elenoocka-E
IkarusTrojan.Win32.Crypt
JiangminTrojan.Refinka.ahc
MaxSecureTrojan.Malware.300983.susgen
AviraHEUR/AGEN.1111254
Antiy-AVLTrojan/Win32.Refinka
MicrosoftTrojanDownloader:Win32/Nymaim.K
ArcabitTrojan.Agent.CQSQ
ZoneAlarmHEUR:Trojan-Banker.Win32.GozNym.pef
GDataTrojan.Agent.CQSQ
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Nymaim.R213858
Acronissuspicious
VBA32Trojan.Refinka
ALYacTrojan.Agent.CQSQ
MAXmalware (ai score=100)
MalwarebytesTrojan.Nymaim
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.GCCF
RisingTrojan.Kryptik!1.AE8F (CLASSIC)
YandexTrojan.GenAsa!kWyrPVP1imY
SentinelOneStatic AI – Malicious PE – Downloader
eGambitUnsafe.AI_Score_97%
FortinetW32/Kryptik.GKMB!tr
AVGWin32:Malware-gen
Cybereasonmalicious.b9e61b
Paloaltogeneric.ml
Qihoo-360HEUR/QVM19.1.C4F5.Malware.Gen

How to remove Trojan.Agent.CQSQ?

Trojan.Agent.CQSQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment