Categories: Malware

How to remove “Win32:Dropper-NCQ [Drp]”?

The Win32:Dropper-NCQ [Drp] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Dropper-NCQ [Drp] virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Dropper-NCQ [Drp]?


File Info:
name: C293BF693E6A2F226033.mlwpath: /opt/CAPEv2/storage/binaries/a41c675ebd2e297018e02fabc56ffededb1ea786920bba2fd359bd94fbe20ab4crc32: 7286D245md5: c293bf693e6a2f226033cfe52cfcfa43sha1: 5770f536d781cf9d7ffdc348dfd0c8d7dc54c278sha256: a41c675ebd2e297018e02fabc56ffededb1ea786920bba2fd359bd94fbe20ab4sha512: 7b51cda4d29f6f5705beea229d5d64ea3be7ef061608e529b2bacd07286d88da8fd4bbe03efbde830de663029a6ebd57aebcbedf85f339b4afc8ab1e77a8842dssdeep: 6144:UABALYsjkiD6extqRySu3NDBv46Jw9r7cpt7:UABAkYYerqR0NZnJs7Utype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CF24D052670048A9F36D4B325D46F5E849569E3C68C8F24FF03CBE36A8322935A7764Fsha3_384: 3bd530af4283748d25b4ce44a90bf9802a06813cdb50a76d3322a0fa3aa76360defd0959af83c550cfb633fb4b4f52e5ep_bytes: b890064a005064ff3500000000648925timestamp: 2013-09-02 10:48:13
Version Info:
0: [No Data]

Win32:Dropper-NCQ [Drp] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen6.36651
MicroWorld-eScan	Trojan.GenericKDZ.96040
FireEye	Generic.mg.c293bf693e6a2f22
CAT-QuickHeal	Trojan.Urelas.C.mue
ALYac	Trojan.GenericKDZ.96040
Malwarebytes	Agent.Trojan.DDOS.DDS
Zillya	Trojan.Wecod.Win32.275
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 00588d7d1 )
K7GW	Spyware ( 00588d7d1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36164.niXfaCTMZ2ei
Cyren	W32/Urelas.E.gen!Eldorado
ESET-NOD32	a variant of Win32/Spy.CardSpy.NAF
APEX	Malicious
ClamAV	Win.Trojan.Agent-1223118
Kaspersky	Trojan.Win32.Wecod.all
BitDefender	Trojan.GenericKDZ.96040
NANO-Antivirus	Trojan.Win32.CardSpy.jtfdvr
SUPERAntiSpyware	Trojan.Agent/Gen-Urelas
Avast	Win32:Dropper-NCQ [Drp]
Tencent	Trojan.Win32.CardSpy.16000130
Emsisoft	Trojan.GenericKDZ.96040 (B)
F-Secure	Trojan.TR/Spy.Cardspy.qqket
VIPRE	Trojan.GenericKDZ.96040
McAfee-GW-Edition	BehavesLike.Win32.Corrupt.dc
Trapmine	malicious.moderate.ml.score
Sophos	Troj/Cardspy-G
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKDZ.96040
Jiangmin	Trojan/Wecod.do
Google	Detected
Avira	TR/Spy.Cardspy.qqket
Antiy-AVL	Trojan/Win32.Wecod
Xcitium	TrojWare.Win32.Small.NAF@531prv
Arcabit	Trojan.Generic.D17728
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Backdoor/Win32.Plite.C191748
Acronis	suspicious
McAfee	GenericRXAA-AA!C293BF693E6A
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Urelas
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Urelas!8.1F5 (TFE:3:UtUoT3VykBU)
Yandex	Trojan.Wecod!JvYd2h091/I
Ikarus	Virus.Win32.CeeInject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Wecod.ALL!tr
AVG	Win32:Dropper-NCQ [Drp]
Cybereason	malicious.93e6a2
DeepInstinct	MALICIOUS