Categories: Malware

Win32/PSW.Agent.NYQ malicious file

The Win32/PSW.Agent.NYQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/PSW.Agent.NYQ virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/PSW.Agent.NYQ?


File Info:
crc32: 6687A4DBmd5: e1d3e637b60900eda58565aca58597c9name: E1D3E637B60900EDA58565ACA58597C9.mlwsha1: d25e3d96bcb47abc7453bc3494027dab4283291fsha256: 2662c9557f17ce15e25dda3fa2fff165e6aa6c554987c8feab1e299cffe34974sha512: 5ceb5b59bfe734700b6927cd5e1923f4a9a178c612e95a0dda8e0c0f319d05472cb3ab1ff5331fc7809389f7fa14c8d7b076e23ee8ca697fc5dc40a6a92a78a1ssdeep: 48:aF2k+IYYTAxB5EC7BWnVxAiidlxav2trgtQvh2v:cCMAOED7a6c22type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/PSW.Agent.NYQ also known as:

K7AntiVirus	Password-Stealer ( 0049b09a1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen6.57235
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Gen:Variant.Razy.906856
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.667579
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Password-Stealer ( 0049b09a1 )
Cybereason	malicious.7b6090
Baidu	Win32.Trojan-PSW.Agent.l
Cyren	W32/Trojan.EOKO-3815
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/PSW.Agent.NYQ
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.CosmicDuke-6376318-0
Kaspersky	HEUR:Backdoor.Win32.CosmicDuke.gen
BitDefender	Gen:Variant.Razy.906856
NANO-Antivirus	Trojan.Win32.CosmicDuke.dbzksi
ViRobot	Trojan.Win32.CosmicDuke.1314325
MicroWorld-eScan	Gen:Variant.Razy.906856
Tencent	Malware.Win32.Gencirc.10b3d341
Ad-Aware	Gen:Variant.Razy.906856
Sophos	ML/PE-A + Troj/CosDuke-C
Comodo	TrojWare.Win32.CosmicDuke.DB@6lnk05
F-Secure	Trojan:W32/CosmicDuke.C
BitDefenderTheta	Gen:NN.ZexaF.34236.hoZ@a8mOibhi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_SKEEYAH_FC170192.UVPA
McAfee-GW-Edition	PWS-FBWV!E1D3E637B609
FireEye	Generic.mg.e1d3e637b60900ed
Emsisoft	Gen:Variant.Razy.906856 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/CosmicDuke.i
Avira	TR/Rogue.11473269
Antiy-AVL	Trojan/Generic.ASMalwS.AD3B1E
Microsoft	TrojanDropper:Win32/Miniduke!rfn
ZoneAlarm	HEUR:Backdoor.Win32.CosmicDuke.gen
GData	Gen:Variant.Razy.906856
AhnLab-V3	Trojan/Win32.Agent.R131885
Acronis	suspicious
McAfee	PWS-FBWV!E1D3E637B609
MAX	malware (ai score=100)
VBA32	BScope.Backdoor.CosmicDuke
Malwarebytes	Backdoor.CosmicDuke
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_SKEEYAH_FC170192.UVPA
Rising	Backdoor.Win32.CosmicDuke.b (CLASSIC)
Yandex	Trojan.GenAsa!Xxdu1b+ysKo
Ikarus	Trojan.Win32.PSW
MaxSecure	Trojan.Malware.7204681.susgen
Fortinet	W32/Agent.NYQ.PWS!tr
AVG	Win32:Malware-gen