Trojan:Win32/Agent.QN information

The Trojan:Win32/Agent.QN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Agent.QN virus can do?

• Reads data out of its own binary image
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Attempts to stop active services
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Installs itself for autorun at Windows startup
• Network activity detected but not expressed in API logs
• Created a service that was not started
• Creates a slightly modified copy of itself
• Anomalous binary characteristics

How to determine Trojan:Win32/Agent.QN?

File Info:
crc32: 3E0A0D3B
md5: ccbe1775eb280c1b6187628534fc34da
name: CCBE1775EB280C1B6187628534FC34DA.mlw
sha1: e6fd82f5b0d4db6e08f1b6d73e55c9224e14e53e
sha256: 2a78a8a9bae302f1f588d5ad056f33d0fb23d5af1d37b53d9bbe93faa7bbdd2c
sha512: 429fc9f21b5b482fdf00cb40d92bd80df8156da85f98443a37fabcde96cbde7381e8a51888981ce02389394c00c217d0f600f5b01f22db5d58a80e403801fa06
ssdeep: 6144:32RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:32EB0NxDIBuOFe7/uT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/Agent.QN also known as:

How to remove Trojan:Win32/Agent.QN?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.