Trojan

Trojan.PWS.Agent.SQA information

Malware Removal

The Trojan.PWS.Agent.SQA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.PWS.Agent.SQA virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Steals private information from local Internet browsers
  • Exhibits behavior characteristic of Pony malware
  • Collects information about installed applications
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed mail clients
  • Anomalous binary characteristics

How to determine Trojan.PWS.Agent.SQA?


File Info:

crc32: E808AD96
md5: 584dd1634c947174914132fc24b6c194
name: 584DD1634C947174914132FC24B6C194.mlw
sha1: f68bb374e2fb63e4e85a75e383ca3562c19070bd
sha256: a8f87315426d5c09fa7d6438b921520d47360d97ecef5cfbe9c018fcfd1a4ff3
sha512: 6e89074ca77a2d75acfd76264e8daf402a34672a5fb1007be51d262543f413c204c17f1ccddc4bb29bf611c711219d247d1a3e698fd5b50f84de281c2f28fb2b
ssdeep: 1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEI2VkzZ36:9dOy+ubiDBzv+1H4OgYEIv36
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.PWS.Agent.SQA also known as:

BkavW32.AIDetect.malware1
K7AntiVirusPassword-Stealer ( 0040f4f51 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.2155
CynetMalicious (score: 100)
CAT-QuickHealPWS.Fareit.E3
ALYacTrojan.PWS.Agent.SQA
CylanceUnsafe
ZillyaTrojan.Fareit.Win32.570
CrowdStrikewin/malicious_confidence_100% (D)
K7GWPassword-Stealer ( 0040f4f51 )
Cybereasonmalicious.34c947
BaiduWin32.Trojan-PSW.Fareit.a
CyrenW32/Tepfer.E.gen!Eldorado
SymantecInfostealer!im
ESET-NOD32Win32/PSW.Fareit.A
APEXMalicious
AvastSf:Crypt-AS [Trj]
ClamAVWin.Trojan.PonyStealer-9831667-0
KasperskyTrojan-PSW.Win32.Tepfer.gen
BitDefenderTrojan.PWS.Agent.SQA
NANO-AntivirusTrojan.Win32.Siggen.evgeyh
MicroWorld-eScanTrojan.PWS.Agent.SQA
TencentMalware.Win32.Gencirc.10b4521f
Ad-AwareTrojan.PWS.Agent.SQA
SophosML/PE-A + Troj/PWS-CDN
ComodoTrojWare.Win32.PWS.Fareit.GS@5t8zib
BitDefenderThetaGen:NN.ZexaF.34662.fmX@aSPbJkj
VIPRETrojan.Win32.Fareit.gi (v)
TrendMicroTROJ_SPNR.15GB13
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.mh
FireEyeGeneric.mg.584dd1634c947174
EmsisoftTrojan.PWS.Agent.SQA (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Generic.axcol
AviraTR/PSW.Fareit.iloen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Win32.Unknown
MicrosoftPWS:Win32/Fareit
ArcabitTrojan.PWS.Agent.SQA
SUPERAntiSpywareTrojan.Agent/Gen-PWS
ZoneAlarmTrojan-PSW.Win32.Tepfer.gen
GDataTrojan.PWS.Agent.SQA
AhnLab-V3Trojan/Win32.Tepfer.R54812
Acronissuspicious
McAfeePWS-Zbot.gen.aiz
MAXmalware (ai score=83)
VBA32BScope.Malware-Cryptor.Ponik
MalwarebytesSpyware.Pony
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_SPNR.15GB13
RisingStealer.Fareit!1.B777 (RDMK:cmRtazofAM8zE+yI9FMFaOPkr6YD)
YandexTrojan.GenAsa!qzB/BOkUj5k
IkarusTrojan-Spy.Fareit
FortinetW32/Agent.NTM!tr
AVGSf:Crypt-AS [Trj]
Qihoo-360HEUR/QVM20.1.4264.Malware.Gen

How to remove Trojan.PWS.Agent.SQA?

Trojan.PWS.Agent.SQA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment