Categories: RansomTrojan

Trojan.Ransom.AQG removal instruction

The Trojan.Ransom.AQG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.AQG virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Ransom.AQG?


File Info:
name: 79D28E5CEE544E761507.mlwpath: /opt/CAPEv2/storage/binaries/66289a91dc4a61fd2c83e00c7d016524e3a8623f4aaf29519b9402cf1b43c988crc32: A5B51424md5: 79d28e5cee544e76150784fc5e74cb55sha1: 0bf0aa22ce50796aa9de908ee05928208b695968sha256: 66289a91dc4a61fd2c83e00c7d016524e3a8623f4aaf29519b9402cf1b43c988sha512: cc8ac502968494313891e8b13641d7bcd9ec5a29cdc5bd6eb68ab6de79e7fc98a4d758b86f62a317a7e3dd6579d4637d009fba35935f1722622a172033a1dac2ssdeep: 6144:tlYI8kfaX9UDNlk4hASzPMmDowyxz7QU2PTVG4ZEPHtY8qMK6T:b8kfaNE8NSoZjjuVG4kVE6type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FA84F13638C23AE3E7E1C439C1C95233CA95C937E8599D73E185CE5FA4894A3DA6C067sha3_384: 1d0790d823aa4679eed46e8b0b831798b73dc70e9dc0a90d2bf17b819cf93d3066024313858b6740f1f5dffbb99ec2c9ep_bytes: 558bec6aff6860c4410068b6b4410064timestamp: 2009-04-23 07:42:51
Version Info:
Comments: ThanCompanyName: Picasa, Inc.FileDescription: Arc Assures SuspensionFileVersion: 0.250.128.219InternalName: VistasLegalCopyright: Copyright (C) 2018LegalTrademarks: BesidesOriginalFilename: Surfingsl.EXEPrivateBuild: 36, 94, 55, 23ProductName: Squint BoniestProductVersion: 0.46.203.175SpecialBuild: 0.105.76.235

Trojan.Ransom.AQG also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Bitman.toSo
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Ransom.AQG
FireEye	Generic.mg.79d28e5cee544e76
CAT-QuickHeal	Ransom.Teslacrypt.OL4
ALYac	Trojan.Ransom.TeslaCrypt
Zillya	Trojan.Filecoder.Win32.2000
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004dc0021 )
K7GW	Trojan ( 004dc0021 )
Cybereason	malicious.cee544
BitDefenderTheta	Gen:NN.ZexaF.34754.xq0@aqA97vab
VirIT	Trojan.Win32.Teslacrypt.BG
Cyren	W32/Crowti.ZTAV-0446
Symantec	Trojan.Randsom.A
tehtris	Generic.Malware
ESET-NOD32	Win32/Filecoder.TeslaCrypt.I
Baidu	Win32.Trojan.Filecoder.k
TrendMicro-HouseCall	Ransom_CRYPTESLA.SMJ7
Kaspersky	Trojan-Ransom.Win32.Bitman.ldt
BitDefender	Trojan.Ransom.AQG
NANO-Antivirus	Trojan.Win32.AVKill.eajnxm
Cynet	Malicious (score: 100)
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10c40d7f
Ad-Aware	Trojan.Ransom.AQG
Emsisoft	Trojan.Ransom.AQG (B)
Comodo	Malware@#2xyhubtcy3yk4
DrWeb	Trojan.AVKill.59921
VIPRE	Trojan.Ransom.AQG
TrendMicro	Ransom_CRYPTESLA.SMJ7
McAfee-GW-Edition	Ransomware-FEB!79D28E5CEE54
Trapmine	suspicious.low.ml.score
Sophos	ML/PE-A + Mal/Ransom-EK
APEX	Malicious
GData	Trojan.Ransom.AQG
Jiangmin	Trojan.Bitman.hw
Webroot	W32.Ransom.Teslacrypt
Avira	TR/AD.TeslaCrypt.Y.215
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASMalwS.330C
Arcabit	Trojan.Ransom.AQG
Microsoft	Ransom:Win32/Tescrypt!rfn
Google	Detected
AhnLab-V3	Trojan/Win32.Teslacrypt.R174529
McAfee	Ransomware-FEB!79D28E5CEE54
VBA32	BScope.TrojanRansom.Bitman
Ikarus	Trojan-Ransom.TeslaCrypt
Rising	Trojan.Agent!1.A322 (CLASSIC)
Fortinet	W32/Kryptik.EOVH!tr
AVG	Win32:Evo-gen [Trj]
Panda	Trj/RansomCrypt.H