Worm

UDS:Worm.Win32.Qvod.qe (file analysis)

Malware Removal

The UDS:Worm.Win32.Qvod.qe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What UDS:Worm.Win32.Qvod.qe virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine UDS:Worm.Win32.Qvod.qe?


File Info:

name: EC8833553012E0AC1558.mlw
path: /opt/CAPEv2/storage/binaries/3b9d16a36bcdce6ce3b1ed9bae2895a8ec55d5017a4de716caa873bbaafcc6c1
crc32: A64E0C04
md5: ec8833553012e0ac15588f227aa43133
sha1: 06cb9003e9763cb82c624711ee3eff6a9ad59d69
sha256: 3b9d16a36bcdce6ce3b1ed9bae2895a8ec55d5017a4de716caa873bbaafcc6c1
sha512: 3d9668be2c4d2d0eb66cfaa738fe2df2d34f6cc76a9227e9e2df45b847131ef40cf352964413c3a485e4ae930ea7e97af88a9dc82d6fab15644847019b8bf3ac
ssdeep: 3072:J8U2yJN5f661xRZbALxB1Ojdgx8GYEqPJU88V0yIB5w20BIGBmdDQ+rI5zlalX+2:J8U2qy6rRZb7jxGYEqPJ8eyIBszciQX1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A14D044BAC685F7C4010730986D6B73D63DFF182A30E69E83987D6A7D78682B49C1F6
sha3_384: 7f799a9f688e249604df84baca6b342cb43342d78e1c05c18ca6e0086db8e5f3e9b268ed9081f1bca1b0a1752a6b8cb9
ep_bytes: e82f2b000050e83f3101000000000090
timestamp: 2007-05-22 04:59:14

Version Info:

0: [No Data]

UDS:Worm.Win32.Qvod.qe also known as:

ClamAVWin.Trojan.Rootkit-6659
FireEyeGeneric.mg.ec8833553012e0ac
CAT-QuickHealW32.Jadtre.A4
ALYacTrojan.GenericKD.49199687
CylanceUnsafe
Sangfor[RAR SFX]
AlibabaVirus:Win32/Wapomi.8d542080
Cybereasonmalicious.3e9763
CyrenW32/Pikorms.A.gen!Eldorado
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Wapomi.K
APEXMalicious
AvastWin32:Evo-gen [Susp]
CynetMalicious (score: 99)
KasperskyUDS:Worm.Win32.Qvod.qe
BitDefenderTrojan.GenericKD.49199687
MicroWorld-eScanTrojan.GenericKD.49199687
TencentWin32.Virus.Wapomi.Amvw
Ad-AwareTrojan.GenericKD.49199687
SophosMal/Generic-S
DrWebTrojan.Hostar.4
TrendMicroPE_PIKORAV.SM-O
McAfee-GW-EditionBehavesLike.Win32.Dropper.cc
EmsisoftTrojan.GenericKD.49199687 (B)
GDataTrojan.GenericKD.49199687
JiangminTrojan.StartPage.dop
AviraW32/Viking.AT
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!EC8833553012
MAXmalware (ai score=85)
MalwarebytesNimnul.Virus.FileInfector.DDS
TrendMicro-HouseCallPE_PIKORAV.SM-O
YandexTrojan.GenAsa!udikpZMm8lk
IkarusW32.Viking
MaxSecureVirus.W32.Qvod.A
FortinetW32/Qvod.BE!tr
AVGWin32:Evo-gen [Susp]

How to remove UDS:Worm.Win32.Qvod.qe?

UDS:Worm.Win32.Qvod.qe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment