Categories: Malware

Win32/Filecoder.CQ removal guide

The Win32/Filecoder.CQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Filecoder.CQ virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

How to determine Win32/Filecoder.CQ?


File Info:
crc32: C141BC5Emd5: 82a89d1caa3659f9f7d309bda94e0841name: 82A89D1CAA3659F9F7D309BDA94E0841.mlwsha1: 6149f236fc541c12b447be864bc8f41ecb93b8cdsha256: b0b426e7cc0d67b6777eba283302dc325442541a6e461cc700cbba87f1e8cbf0sha512: ad34beb2408db0d49699fe2c493694d65ab56e50a9701d69a175c39a81f3519b2d427779da2905e74fb4701c3c99f90d306da5687075824bc5c3f8e1bff09698ssdeep: 49152:pXz+XF2w05NGWPmLMnLOnlcx+jngke7Cs3WuA5CAFEt:pXz+i5Jm4ilxaCs3WuapFitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x420x43ex441x441x418x43dx444x43ex442x435x445                                                                                         FileDescription: x418x43dx444x43ex440x43cx430x446x438x43ex43dx43dx43ex435 x43fx43ex441x43bx430x43dx438x435 6.0.0.8 Installation                FileVersion: 6.0.0.8             Comments: CompanyName: x420x43ex441x441x418x43dx444x43ex442x435x445                                                 Translation: 0x0409 0x04e4

Win32/Filecoder.CQ also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Encoder.567
Cynet	Malicious (score: 90)
ALYac	Gen:Trojan.Heur.RH3@tb9fsadcg
Cylance	Unsafe
Sangfor	Trojan.Win32.3119.219
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Criakl.721e0741
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.caa365
Cyren	W32/Banker.BF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.CQ
APEX	Malicious
TotalDefense	Win32/Jorik.KJ
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Trojan.Heur.RH3@tb9fsadcg
NANO-Antivirus	Trojan.Win32.Filecoder.cyxdju
MicroWorld-eScan	Gen:Trojan.Heur.RH3@tb9fsadcg
Tencent	Win32.Trojan.Filecoder.Eadk
Ad-Aware	Gen:Trojan.Heur.RH3@tb9fsadcg
Sophos	Mal/Generic-R + Troj/Ransom-ATE
Comodo	Malware@#3i0m8zfn95y88
BitDefenderTheta	AI:Packer.F78C42661D
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.82a89d1caa3659f9
Emsisoft	Gen:Trojan.Heur.RH3@tb9fsadcg (B)
Jiangmin	Trojan.Generic.cwuet
Avira	TR/Dropper.Gen
eGambit	Generic.Dropper
Microsoft	Ransom:Win32/Criakl.A
Arcabit	Trojan.Heur.E194E0
GData	Gen:Trojan.Heur.RH3@tb9fsadcg
AhnLab-V3	Trojan/Win32.Ransom.C401806
McAfee	Artemis!82A89D1CAA36
MAX	malware (ai score=86)
VBA32	TScope.Malware-Cryptor.SB
Malwarebytes	Malware.AI.2762111104
Rising	Ransom.Criakl!8.1B3B (CLOUD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	W32/Filecoder.CQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Criakl.HwUBkAEA