Worm

Should I remove “Worm.Win32.Qvod.akm”?

Malware Removal

The Worm.Win32.Qvod.akm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Win32.Qvod.akm virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs

How to determine Worm.Win32.Qvod.akm?


File Info:

crc32: D690B740
md5: 0109a891c39acb8c0c5285d8e67ccd7e
name: DevManager.exe
sha1: cb06b1a79aa67752e0c288f04a239bee1811725a
sha256: 4c263a080f0b64531ce51df30afe78dac4127195d02fe94ebb768c026eb42d91
sha512: c9fb5db57225c49e4cd639c8b5f56f809675ac57bc1f58b65a79e00af5ca4c2c644b5d3ae0810fdc4da619cb39f4792856ed43c55bf22805bcbfb505c53df18c
ssdeep: 12288:LjkArEN249AyE/rbaMct4bO2/xTMp6Ijswghf+gbwlaY0Wgr:AFE//Tct4bOsB06IjsdhfHslB0Wgr
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: crwmart
FileVersion: 2.0.0.0
FileDescription: x8bbex5907x72b6x6001x7ba1x7406x5668
Translation: 0x0804 0x04b0

Worm.Win32.Qvod.akm also known as:

MicroWorld-eScanGen:Win32.QVod.A
CAT-QuickHealExploit.Shellcode
VIPRETrojan.Win32.Generic!BT
K7GWTrojan ( 700000111 )
K7AntiVirusTrojan ( 700000111 )
TrendMicroPE_PIKORAV.SM-O
BaiduWin32.Virus.Wapomi.a
CyrenW32/Pikorms.A.gen!Eldorado
SymantecSecurityRisk.gen1
TrendMicro-HouseCallPE_PIKORAV.SM-O
AvastWin32:Malware-gen
ClamAVWin.Trojan.Qvod-147
KasperskyWorm.Win32.Qvod.akm
BitDefenderGen:Win32.QVod.A
NANO-AntivirusTrojan.Win32.Qvod.rgzna
AegisLabTroj.Dropper.W32.Autoit.lKmy
TencentWin32.Worm.Qvod.Kf
Ad-AwareGen:Win32.QVod.A
SophosMal/Rootkit-Z
ComodoTrojWare.Win32.Downloader.Agent.gpyl
F-SecureGen:Win32.QVod.A
DrWebTrojan.MulDrop5.1030
ZillyaWorm.Qvod.Win32.1392
Invinceaworm.win32.moarider.a
McAfee-GW-EditionBehavesLike.Win32.Virus.gc
EmsisoftGen:Win32.QVod.A (B)
SentinelOnestatic engine – malicious
F-ProtW32/Pikorms.A.gen!Eldorado
WebrootW32.Malware.Gen
AviraW32/Viking.atdc.8
FortinetW32/Qvod.BE!tr
Antiy-AVLWorm/Win32.Qvod
Endgamemalicious (moderate confidence)
ArcabitGen:Win32.QVod.A
ZoneAlarmWorm.Win32.Qvod.akm
MicrosoftExploit:Win32/Shellcode
AVwareTrojan.Win32.Generic!BT
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Wapomi.K
YandexWorm.Qvod!F8ZGJ9B4A0Y
IkarusWorm.Win32.Qvod
GDataGen:Win32.QVod.A
AVGWorm/AutoRun.JT
CrowdStrikemalicious_confidence_100% (D)
Qihoo-360Win32/Trojan.450

How to remove Worm.Win32.Qvod.akm?

Worm.Win32.Qvod.akm removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment