How to remove “Trojan:Win32/Multsarch.Q”?

The Trojan:Win32/Multsarch.Q is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Multsarch.Q virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Trojan:Win32/Multsarch.Q?

File Info:
name: 2969DE05C1FAE8BCB79E.mlw
path: /opt/CAPEv2/storage/binaries/de7f6812b0fde739c0119fdcd938a35d22021c669cb09de85ceb4297cbee6ef8
crc32: 49BB7CB4
md5: 2969de05c1fae8bcb79ed830b40939b4
sha1: c61fa2d0fc733936138b925352db23a8a48e3470
sha256: de7f6812b0fde739c0119fdcd938a35d22021c669cb09de85ceb4297cbee6ef8
sha512: a7c3e68965a7226489917d282ecdc9ba16069ada176ea06e6be191737b41c07638beeebbe1a2c8a8f4579b2b40688a62130abae89fe91c2d5d0d4394e413bb6a
ssdeep: 393216:m+h/RETPH3oZ37qj5K8cuWcbJa96UE6jNDP:tcSWKbuba861
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T133E633B963CA7ED2C64C9E7809997665D8F309F45C382FC16C37C2E948FC0A9C2AB155
sha3_384: 31921495948d60907ebd93b4b0b7a863293af3f53e01166a732867dc1fd25fc7d38faf5f2b8bbd7cdd02a1687f03e122
ep_bytes: 60be00b0d1008dbe00606effc787ec90
timestamp: 2008-09-26 22:50:52

Version Info:
0: [No Data]

Trojan:Win32/Multsarch.Q also known as:

How to remove Trojan:Win32/Multsarch.Q?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.