Trojan

Trojan.AgentWDCR.OKQ removal tips

Malware Removal

The Trojan.AgentWDCR.OKQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.AgentWDCR.OKQ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.AgentWDCR.OKQ?


File Info:

crc32: 679C1990
md5: 6b68766d0bee2306c3cfe4402225926f
name: upload_file
sha1: 533de0e31200b6c1048ecba52fe606c79cd1f40e
sha256: e8e8636ec02c6369698b6bad6372141f6608d5d6ec3d653b1700580002539f26
sha512: 708cb9d8569e8ed7a374632f3e1aab94f33297c17e8560b22f719f5ceb8dc3dfdbc80f2dd5dc0c27d2ce28faa37ff13c9c6f3ef7a7d2f0babb074c0cc0a25d0d
ssdeep: 3072:6PC9UICOcAlEjXFGF+Y/HHlV+IFjP7mwup8ZHveU1tTUMe8unwEAS4:D1llFEY/lV+ajP7mwuOHWItTnu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.AgentWDCR.OKQ also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Banker1.26525
MicroWorld-eScanTrojan.AgentWDCR.OKQ
FireEyeGeneric.mg.6b68766d0bee2306
CAT-QuickHealTrojan.GenericPMF.S2589827
ALYacTrojan.AgentWDCR.OKQ
CylanceUnsafe
ZillyaTrojan.ZPACK.Win32.356
AegisLabTrojan.Win32.Agentb.4!c
SangforMalware
K7AntiVirusTrojan ( 00536d121 )
BitDefenderTrojan.AgentWDCR.OKQ
K7GWTrojan ( 00536d121 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTrojan.Win32.FormBook.SM
BitDefenderThetaAI:Packer.BD9CB8441E
CyrenW32/Formbook.A.gen!Eldorado
SymantecTrojan.Formbook
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Formbook-7399661-0
KasperskyTrojan.Win32.Agentb.jeau
AlibabaTrojan:Win32/Agentb.8eb53b79
NANO-AntivirusVirus.Win32.Gen.fhmfji
ViRobotTrojan.Win32.Agent.171520.AC
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.AgentWDCR.OKQ
EmsisoftTrojan.AgentWDCR.OKQ (B)
ComodoTrojWare.Win32.Swotter.A@7i7pqi
F-SecureTrojan.TR/TrickBot.DQ
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-R + Troj/Formbook-A
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
SophosTroj/Formbook-A
SentinelOneDFI – Malicious PE
GDataWin32.Trojan-Stealer.Injector.89LMXZ
JiangminTrojan.Generic.clfxo
WebrootW32.Trojan.Gen
AviraTR/TrickBot.DQ
MAXmalware (ai score=100)
Antiy-AVLTrojan[Spy]/Win32.Swotter
ArcabitTrojan.AgentWDCR.OKQ
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
ZoneAlarmTrojan.Win32.Agentb.jeau
MicrosoftTrojan:Win32/Formbook!MTB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Formbook.C2420198
Acronissuspicious
McAfeeGeneric.azp
VBA32BScope.TrojanPSW.Banker
MalwarebytesSpyware.FormBook
PandaTrj/WLT.D
ZonerTrojan.Win32.70616
ESET-NOD32Win32/Formbook.AA
TrendMicro-HouseCallTrojan.Win32.FormBook.SM
RisingStealer.Fareit!8.170 (KTSE)
YandexTrojan.Agentb!Cpd+ZgytPtg
IkarusTrojan-Spy.FormBook
FortinetW32/Formbook.A!tr
AVGWin32:Malware-gen
Cybereasonmalicious.d0bee2
Paloaltogeneric.ml
Qihoo-360HEUR/QVM20.1.B435.Malware.Gen

How to remove Trojan.AgentWDCR.OKQ?

Trojan.AgentWDCR.OKQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment