Trojan.Win32.Mucc.qws malicious file

The Trojan.Win32.Mucc.qws is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Mucc.qws virus can do?

Executable code extraction
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Mucc.qws?


File Info:
crc32: FD82AB32
md5: ff7cda5f1f8d4bd3163b5fe02731529d
name: FF7CDA5F1F8D4BD3163B5FE02731529D.mlw
sha1: 27539d75daf7c36a1dc118bb695d00a7897116c4
sha256: f36f8e7c9cfbd9fff857f66c65fa2780a0081f5339ebc18c664b26961ff1b5e8
sha512: ee60f8ffe04c589db99055b9f97fa7efc5bd8abbc633b376ee3ff7790610a6fff59da08beaf43380808eafe793ea7ca6ac824b09e4f597ac9871dbbca2cb5660
ssdeep: 1536:SUQ9sB/KBEE7ouk2voDbfQIYepkGjFbWiQfhkMiNElv065oe1sRo6DomgJ:Y9s/KBiYINNFw6EGCB1s5oj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: BLOMSTERFORRETNINGERS
FileVersion: 1.00
CompanyName: Boxinga
Comments: Boxinga
ProductName: Boxinga
ProductVersion: 1.00
OriginalFilename: BLOMSTERFORRETNINGERS.exe

Trojan.Win32.Mucc.qws also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Mucc.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.37546742
ALYac	Trojan.GenericKD.37546742
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Generic.ed282ef2
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Mucc.qws
BitDefender	Trojan.GenericKD.37546742
Ad-Aware	Trojan.GenericKD.37546742
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34142.hm0@aSm5SCgj
VIPRE	Worm.Win32.Gamarue.an (v)
McAfee-GW-Edition	BehavesLike.Win32.Fareit.ch
FireEye	Generic.mg.ff7cda5f1f8d4bd3
Emsisoft	Trojan.GenericKD.37546742 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Mucc.agdsy
GData	Trojan.GenericKD.37546742
McAfee	GenericRXAA-AA!FF7CDA5F1F8D
MAX	malware (ai score=99)
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.MalPack.VB
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen

How to remove Trojan.Win32.Mucc.qws?

Trojan.Win32.Mucc.qws removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X