Win32/Injector.DQGX removal tips

The Win32/Injector.DQGX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DQGX virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.DQGX?


File Info:
crc32: B6917CC6
md5: dadb5b0bafcd6cc6aa9dce2787fb3333
name: DADB5B0BAFCD6CC6AA9DCE2787FB3333.mlw
sha1: 178d1aaddfd4a784fe43a9f31f583b506fc99258
sha256: c0883623a6db9909336be5b36824353331c769b7bf176f9b76f4dc1ad3c66b8c
sha512: aec0538a13ac454d7073243ab59f49b361e09a072b919866e6ec957c6f2afd6efac4c950530040128fb29467c3fad2f4ee1fd776c198be01394edaef2460a309
ssdeep: 24576:/qw+OWj0jqihst0reonN/lkv2O9oefZYENqYjiE:/qwFWj0jNU0reonNNqZ1m
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Jopo
InternalName: Porsches5
FileVersion: 1.00
CompanyName: Jefalla
LegalTrademarks: skYPE
Comments: Jemapaft
ProductName: hifisoFt Jai
ProductVersion: 1.00
FileDescription: Jarop
OriginalFilename: Porsches5.exe

Win32/Injector.DQGX also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.jn0@cuOPF@ni
FireEye	Generic.mg.dadb5b0bafcd6cc6
CAT-QuickHeal	Trojan.Mucc
McAfee	Fareit-FIO!DADB5B0BAFCD
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 005135ef1 )
BitDefender	Gen:Heur.PonyStealer.jn0@cuOPF@ni
K7GW	Trojan ( 005135ef1 )
Cybereason	malicious.bafcd6
TrendMicro	TrojanSpy.Win32.LOKI.SM.hp
BitDefenderTheta	Gen:NN.ZevbaF.34634.jn0@auOPF@ni
Cyren	W32/VBcrypt.BS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Genkryptik-7115908-0
Kaspersky	Trojan.Win32.Mucc.amy
Alibaba	Trojan:Win32/Injector.c31322e4
Tencent	Malware.Win32.Gencirc.11b10a81
Ad-Aware	Gen:Heur.PonyStealer.jn0@cuOPF@ni
TACHYON	Trojan/W32.VB-Mucc.1208320
Emsisoft	Gen:Heur.PonyStealer.jn0@cuOPF@ni (B)
Comodo	.UnclassifiedMalware@0
F-Secure	Heuristic.HEUR/AGEN.1126331
Invincea	Mal/FareitVB-M
McAfee-GW-Edition	BehavesLike.Win32.Fareit.tc
Sophos	Mal/FareitVB-M
Ikarus	Trojan.Win32.Injector
Jiangmin	Trojan.Mucc.beb
Webroot	W32.Mucc.amy
Avira	HEUR/AGEN.1126331
Antiy-AVL	Trojan/Win32.Mucc
Microsoft	VirTool:Win32/VBInject.OR!bit
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.PonyStealer.E83F6B
ZoneAlarm	Trojan.Win32.Mucc.amy
GData	Gen:Heur.PonyStealer.jn0@cuOPF@ni
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1777
VBA32	Trojan.Packed
ALYac	Gen:Heur.PonyStealer.jn0@cuOPF@ni
MAX	malware (ai score=86)
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.DQGX
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SM.hp
Rising	Trojan.Injector!1.C8AA (CLASSIC)
Yandex	Trojan.GenAsa!I6gPENpUPjU
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Injector.DRIG!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.acf

How to remove Win32/Injector.DQGX?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.DQGX removal tips