Trojan

What is “Trojan.Win32.Scar.pmtq”?

Malware Removal

The Trojan.Win32.Scar.pmtq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Scar.pmtq virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Scar.pmtq?


File Info:

crc32: 52619F37
md5: e8935a7d3b5c48897b4430c7ea9719af
name: kediler-ekran-koruyucu.exe
sha1: d69208bf3f37bf517b290f7a4a58a2b30f910ba0
sha256: 9ca1b06ad42dff919c21caddb8d5c660e977e3a18eec46dffc1c1b755c1b88d4
sha512: f6246dba5b83a479bd4de44bc3c29ed082b651e136413453bd44ef8b81d9efd354e3edb25fc3f3d3b0d6aa100eba79e09fed6fb1976d5e7f3ccca75eb4b5af0b
ssdeep: 24576:6vouJ3XhquHb1W2Xkmh9n9nCkwUnhLLR+jcFvtLFle7dICFhB:6v9Jh1p3Lh9nPwSMRxICd
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Win32.Scar.pmtq also known as:

CylanceUnsafe
AegisLabTrojan.Win32.Scar.4!c
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
KasperskyTrojan.Win32.Scar.pmtq
AlibabaTrojan:Win32/Generic.af72b5ec
NANO-AntivirusTrojan.Win32.Agent.ebupwa
RisingTrojan.Scar!8.33F (CLOUD)
ZillyaAdware.Toolbar.Win32.2855
SophosGeneric PUA NG (PUA)
SentinelOneDFI – Suspicious PE
JiangminTrojan.Scar.ewe
WebrootW32.Adware.Gen
MicrosoftPUA:Win32/Vigua.A
ZoneAlarmTrojan.Win32.Scar.pmtq
McAfeeArtemis!E8935A7D3B5C
VBA32Trojan.Scar
MalwarebytesTrojan.Scar
eGambitUnsafe.AI_Score_99%
Qihoo-360Win32/Trojan.5a2

How to remove Trojan.Win32.Scar.pmtq?

Trojan.Win32.Scar.pmtq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment