Trojan

How to remove “Trojan.Agent.DQQW”?

Malware Removal

The Trojan.Agent.DQQW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.DQQW virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Agent.DQQW?


File Info:

name: BE9987F3A14761508858.mlw
path: /opt/CAPEv2/storage/binaries/7e3eb79d1ac853b2ac23a5fd70d8544b75851a7bb8a67b95b33a7facb307231e
crc32: D3284160
md5: be9987f3a14761508858f71d27de4f6e
sha1: ac4e42b1fef6fc28f158906dc1879e520467cd16
sha256: 7e3eb79d1ac853b2ac23a5fd70d8544b75851a7bb8a67b95b33a7facb307231e
sha512: ce2b21852e9532d3931549b4bcfa8db815ba059f580d40a8bd8ca65519dcd26bd08f19c253707bb39a52d44f371f85a4c87d5b4ec4c59bd80907d341beed9a42
ssdeep: 768:80vdNL9vUupWcNa8Zz5iQlmxKgoKgPvkHVyXU:80vdNLtUuFNa8Zz5iQlmx9oKgXk1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12B732BA11E32481AC97E1F3677E45615E6A19849132E8B343F8CD02FEF902854E7DF97
sha3_384: 30b29a6526ab6b14d817526eebcc82a81be6c4f99bb3232cc3ef8689d50d298a678ee23ab71e831842e5b688bdcb821b
ep_bytes: 60be00d047008dbe0040f8ff57eb0b90
timestamp: 2015-01-28 13:36:24

Version Info:

0: [No Data]

Trojan.Agent.DQQW also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Scar.tpJv
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.DQQW
FireEyeGeneric.mg.be9987f3a1476150
ALYacTrojan.Agent.DQQW
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005630c11 )
AlibabaTrojan:Win32/QQSteal.1d99f923
K7GWTrojan ( 005630c11 )
Cybereasonmalicious.3a1476
BitDefenderThetaGen:NN.ZexaF.34062.emW@amVQ95
CyrenW32/S-d61125ea!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Generik.KGQUGAQ
TrendMicro-HouseCallTROJ_GEN.R002C0OKS21
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.DQQW
AvastWin32:Malware-gen
TencentWin32.Trojan.Psw.Pjdp
Ad-AwareTrojan.Agent.DQQW
EmsisoftTrojan.Agent.DQQW (B)
ComodoPacked.Win32.MUPX.Gen@24tbus
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0OKS21
McAfee-GW-EditionBehavesLike.Win32.Generic.lz
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
GDataTrojan.Agent.DQQW
JiangminTrojan.Generic.hdvty
MaxSecureTrojan.Malware.6934089.susgen
AviraTR/PSW.QQSteal.boeu
Antiy-AVLTrojan/Generic.ASMalwS.2ACB602
GridinsoftRansom.Win32.Skeeyah.sa
ArcabitTrojan.Agent.DQQW
ViRobotTrojan.Win32.Z.Agent.78848.AXW
MicrosoftTrojan:Win32/Skeeyah.A!rfn
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R135706
Acronissuspicious
McAfeeArtemis!BE9987F3A147
MAXmalware (ai score=84)
VBA32Trojan.Skeeyah
MalwarebytesRiskWare.Agent
RisingTrojan.Kryptik!1.BC24 (CLASSIC)
YandexTrojan.PWS.QQSteal!SR1yVnbNOig
IkarusTrojan.PSW.QQSteal
FortinetW32/ULPM.16C0!tr
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Agent.DQQW?

Trojan.Agent.DQQW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment