Malware

Win32/Small.NQD information

Malware Removal

The Win32/Small.NQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Small.NQD virus can do?

  • Unconventionial language used in binary resources: Spanish (Modern)
  • Authenticode signature is invalid
  • Checks for the presence of known windows from debuggers and forensic tools

How to determine Win32/Small.NQD?


File Info:

name: AB29401517919E57AB89.mlw
path: /opt/CAPEv2/storage/binaries/7e875ed9ea8f0d1dff156e2db1fe1c03cfcb3a9a66388e665bbe353e91a890e1
crc32: 3D134592
md5: ab29401517919e57ab894f9552f0cba2
sha1: e1a24cef7228c295cdc3a6aa26068144f9192068
sha256: 7e875ed9ea8f0d1dff156e2db1fe1c03cfcb3a9a66388e665bbe353e91a890e1
sha512: 22ce1e882a29df76583e5ffa7d2416a02bb26ad56175274755aad15fff5981e587e23d4c9b3b1925fc65878c2f8630cb085f53558567a3e2e92a19f44f1be75b
ssdeep: 1536:1ya+2/9axYTAHCrSdmCYFdV56ooxGMG2mjT:1cmaxYqEdv6ouo
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T134435C2BFCA4C031F05484F05D3E4F73EE7FAA644751516B9390A5A99EB1160EE0B39B
sha3_384: 60a86f77930d04968533b0c6b81ac7f9e13ec8f012106f45029d4fd369cc18fb965f1096672cddbf834bd4462b9138ae
ep_bytes: eb1066623a432b2b484f4f4b90e998b0
timestamp: 2021-11-20 22:50:36

Version Info:

0: [No Data]

Win32/Small.NQD also known as:

LionicTrojan.Win32.Brendita.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38228051
FireEyeGeneric.mg.ab29401517919e57
ALYacTrojan.GenericKD.38228051
CylanceUnsafe
ZillyaTrojan.Small.Win32.72311
SangforTrojan.Win32.Small.NQD
K7GWTrojan ( 005233881 )
K7AntiVirusTrojan ( 005233881 )
ESET-NOD32a variant of Win32/Small.NQD
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:Backdoor.Win32.Brendita.gen
BitDefenderTrojan.GenericKD.38228051
AvastWin32:Trojan-gen
Ad-AwareTrojan.GenericKD.38228051
TrendMicroTROJ_GEN.R067C0PLC21
McAfee-GW-EditionRDN/Generic BackDoor
EmsisoftTrojan.GenericKD.38228051 (B)
IkarusTrojan.Win32.Small
GDataTrojan.GenericKD.38228051
JiangminBackdoor.Brendita.av
AviraHEUR/AGEN.1136672
Antiy-AVLTrojan/Generic.ASMalwS.34EA5A6
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Generic.D2475053
ViRobotTrojan.Win32.Z.Small.56320
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.C4799165
McAfeeRDN/Generic BackDoor
MAXmalware (ai score=87)
VBA32BScope.TrojanSpy.Skeeyah
TrendMicro-HouseCallTROJ_GEN.R067C0PLC21
RisingTrojan.Generic@ML.97 (RDMK:2o0kTcP8IF1WRbDjzaq55g)
YandexTrojan.Small!DMm8CaG8SKA
FortinetW32/Small.NQD!tr
BitDefenderThetaGen:NN.ZexaF.34084.dGW@aSILjUJ
AVGWin32:Trojan-gen
Cybereasonmalicious.f7228c

How to remove Win32/Small.NQD?

Win32/Small.NQD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment