Categories: Trojan

What is “Trojan.Agent.DQRB”?

The Trojan.Agent.DQRB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.DQRB virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Trojan.Agent.DQRB?


File Info:
name: B51A44935F57B4B4ABD6.mlwpath: /opt/CAPEv2/storage/binaries/ff0dbd471f72845cb57a7b47904acb210e26204dc4267385d358dfd1d3652133crc32: ADEB5ABAmd5: b51a44935f57b4b4abd69382fa322343sha1: 5760263fdb4b4deabae863ccac1abab5c002f996sha256: ff0dbd471f72845cb57a7b47904acb210e26204dc4267385d358dfd1d3652133sha512: 7064056f1f1ddce2f99cf2d208686dbb38bedafdca9a282cf737848f962e0d99f08a6abe70c6df7469ad3fafbf93c6fc700bf0763336316b01f5cca10b3d1595ssdeep: 768:R/LkRDP4t/ioKLiLGOYqmsSXeHF9AjZc9hTlCfkiiFF8ZwNHRo2UY7ay7rJBvhDN:m0KoK+LGndsSXcZhTIpiF8Monm79D0Stype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A9538D13B8D1C573C08246B51DA2CB56AF3BB1210A3AC117BBAC9A5F1F74590D52E39Fsha3_384: 2e5ef2d8562108d70bc25b86f7cb2adcb0289f59cd079e931b1fb2660c2367bc595de155c500809f5f4e06652c60c5c1ep_bytes: 00000000000000000000000000000000timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Trojan.Agent.DQRB also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Sixer.tng9
Cynet	Malicious (score: 100)
FireEye	Generic.mg.b51a44935f57b4b4
McAfee	GenericRXAA-FA!B51A44935F57
Cylance	unsafe
Zillya	Trojan.Kryptik.Win32.4014526
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	Trojan:Win32/Kryptik.e8199de2
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.35f57b
Cyren	W32/Picsys.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Kryptik.GYLL
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Proxy-3993
Kaspersky	UDS:Trojan-Proxy.Win32.Agent.ylv
BitDefender	Trojan.Agent.DQRB
MicroWorld-eScan	Trojan.Agent.DQRB
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Crypt.Cgow
Sophos	Mal/Generic-S
Baidu	Win32.Worm.Picsys.a
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	Trojan.Proxy.24148
VIPRE	Trojan.Agent.DQRB
TrendMicro	TROJ_GEN.R002C0WAU23
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Agent.DQRB (B)
Ikarus	not-a-virus:Server-Proxy.Win32.Sock4Proxy
GData	Win32.Trojan.PSE.11PHGCR
Jiangmin	TrojanProxy.Agent.ecp
Avira	TR/Crypt.ULPM.Gen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	Trojan.Agent.DQRB
ZoneAlarm	UDS:Trojan-Proxy.Win32.Agent.ylv
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R258250
VBA32	TrojanProxy.Agent
Malwarebytes	Generic.Trojan.Delf.DDS
TrendMicro-HouseCall	TROJ_GEN.R002C0WAU23
Rising	Trojan.Generic@AI.96 (RDMK:A0SlEssnRqksyaubgdUJ0w)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Chgt.AC
CrowdStrike	win/malicious_confidence_90% (D)