Categories: Spy

Win32/Spy.Qukart removal tips

The Win32/Spy.Qukart is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Qukart virus can do?

Drops a binary and executes it
The binary likely contains encrypted or compressed data.
A process attempted to delay the analysis task by a long amount of time.
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Attempts to modify browser security settings
Creates a copy of itself
Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.Qukart?


File Info:
crc32: 7CBB2852md5: a1b0c92cde3fe7be79a4b7d0bb67e370name: A1B0C92CDE3FE7BE79A4B7D0BB67E370.mlwsha1: 36149b0824136f3bcf422ad5a637cff1e2bbfc93sha256: b89d7e2df8e9fd758a5c6dc5b44ee263699c84ebd3da11e44d312643f2c06483sha512: a9dbe6a968971ce542a0c87e3df9ac3b800b3ceb61f5a0bfb5961be7046d575d8a15b5c3a41ca61c0cd1ba023889482ed71801cb466010c51b6efd948672836essdeep: 24576:Rfyx52UCMToCM7CMSwRDjIx52UCMToCM7CM37CMIx52UCMToCM7CMMDY2lTaCM3:Rfyx/mDMx/Fx/PHx/dDMx/Fx/type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Spy.Qukart also known as:

Bkav	W32.HfsAutoB.
K7AntiVirus	Proxy-Program ( 00557ea51 )
DrWeb	BackDoor.HangUp.43882
MicroWorld-eScan	GenPack:Generic.Malware.SYd!g.39B433A1
ALYac	GenPack:Generic.Malware.SYd!g.39B433A1
Cylance	Unsafe
Zillya	Trojan.QukartGen.Win32.1
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Starter.ali1001008
K7GW	Proxy-Program ( 00557ea51 )
Cybereason	malicious.cde3fe
TrendMicro	TROJ_GEN.R002C0CE620
Baidu	Win32.Trojan-Spy.Quart.a
Cyren	W32/Berbew.WRHR-5462
Symantec	Backdoor.Berbew.F
ESET-NOD32	a variant of Win32/Spy.Qukart
Zoner	Virus.Win32.31145
APEX	Malicious
TotalDefense	Win32/Webber.W
Paloalto	generic.ml
ClamAV	Win.Trojan.Crypted-30
GData	GenPack:Generic.Malware.SYd!g.39B433A1
Kaspersky	Trojan-Proxy.Win32.Qukart.gen
BitDefender	GenPack:Generic.Malware.SYd!g.39B433A1
NANO-Antivirus	Trojan.Win32.Qukart.fokxzm
ViRobot	Trojan.Win32.Padodor.Gen.A
Tencent	Trojan-Ransom.Win32.Pornoasset.a
Ad-Aware	GenPack:Generic.Malware.SYd!g.39B433A1
Sophos	Mal/Padodor-A
Comodo	Worm.Win32.Qukart.K@565w5t
F-Secure	Trojan.TR/Downloader.Gen
BitDefenderTheta	AI:Packer.977E59671E
VIPRE	BehavesLike.Win32.Malware.ssc (mx-v)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.tc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.a1b0c92cde3fe7be
Emsisoft	GenPack:Generic.Malware.SYd!g.39B433A1 (B)
SentinelOne	DFI – Malicious PE
F-Prot	W32/Berbew.A
Endgame	malicious (high confidence)
Avira	TR/Downloader.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan[Proxy]/Win32.Qukart.gen
Microsoft	Backdoor:Win32/Berbew
Jiangmin	TrojanProxy.Qukart.dzjh
Arcabit	GenPack:Generic.Malware.SYd!g.39B433A1
AegisLab	Trojan.Win32.Generic.kZnr
ZoneAlarm	Trojan-Proxy.Win32.Qukart.gen
AhnLab-V3	Win-Trojan/Berbew.51712
Acronis	suspicious
McAfee	BackDoor-AXJ.gen
MAX	malware (ai score=87)
VBA32	TrojanSpy.Qukart
Malwarebytes	Backdoor.BerBew
TrendMicro-HouseCall	TROJ_GEN.R002C0CE620
Rising	Ransom.PornoAsset!8.6AA (TFE:dGZlOgWfQ/+w2skqwg)
Yandex	Trojan.PR.Qukart!lPLDfWd8hE8
Ikarus	Trojan.Win32.Senta
MaxSecure	Proxy.Qukart.gen
Fortinet	W32/GenKryptik.BJQV!tr
AVG	Win32:Qukart-AL [Trj]
Panda	Trj/Genetic.gen
Qihoo-360	Win32/Trojan.Qukart.A