Categories: Worm

Worm.Win32.Qvod.aly information

The Worm.Win32.Qvod.aly is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Qvod.aly virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Worm.Win32.Qvod.aly?


File Info:
name: E6DDDB49BBA5FF41F04A.mlwpath: /opt/CAPEv2/storage/binaries/12cc26f85f055b7025a63f646e02b3cf2f3cdea69c7b876677fd6123b2e94e97crc32: 1ED2C2BCmd5: e6dddb49bba5ff41f04a7141d1a5663bsha1: 0b3854dd56ac4a69d2490204e0f020c5d415ca32sha256: 12cc26f85f055b7025a63f646e02b3cf2f3cdea69c7b876677fd6123b2e94e97sha512: 71a7fcbf2c1fb4f107b82f474ef2d4de564b29d6aa4fef797c8c2765c4bc23339916300545680efde0877d8297877574207f81c755a08720c666c76e92627abbssdeep: 1536:LYA2WDlKbNANS4aIjDFL1Xul6KF9VZAOd1xUt8OJLmlgVU/KXfMsRbBxcWiwLpp7:L72yKxANHaMBY3FZAU1i8u1fTxcWxg6type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T136D3D066B38505E0E68616320663DBD61362BC6C0EA7A54F31483E7E3D7AF024D7AF53sha3_384: 900b277aedc43126b46c62429eed8bde48ef6615d7f82e3b3c1cf16f884c2e0c67feb975ae4629852389e36ead7287b6ep_bytes: 6814124000e8eeffffff000000000000timestamp: 2005-01-22 10:12:18
Version Info:
Translation: 0x0804 0x04b0CompanyName: Super Rabbit SoftwareLegalCopyright: Cai XuanLegalTrademarks: Super RabbitProductName: Super Rabbit CDROM EjectFileVersion: 2.00ProductVersion: 2.00InternalName: srcd2OriginalFilename: srcd2.exe

Worm.Win32.Qvod.aly also known as:

Bkav	W32.AIDetect.malware1
Lionic	Virus.Win32.Qvod.leHz
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Win32.QVod.A
FireEye	Generic.mg.e6dddb49bba5ff41
ALYac	Gen:Win32.QVod.A
Cylance	Unsafe
VIPRE	Gen:Win32.QVod.A
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
CrowdStrike	win/malicious_confidence_100% (W)
Baidu	Win32.Virus.Wapomi.a
Cyren	W32/Pikorms.A.gen!Eldorado
Symantec	W32.Wapomi.B!inf
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Wapomi.K
APEX	Malicious
ClamAV	Win.Trojan.Rootkit-10606
Kaspersky	Worm.Win32.Qvod.aly
BitDefender	Gen:Win32.QVod.A
NANO-Antivirus	Trojan.Win32.Qvod.bklkm
Avast	Win32:Evo-gen [Trj]
Tencent	Virus.Win32.Qvod.aag
Ad-Aware	Gen:Win32.QVod.A
Emsisoft	Gen:Win32.QVod.A (B)
Comodo	Malware@#21bogo3nualph
DrWeb	Trojan.Siggen.64465
Zillya	Worm.Qvod.Win32.1203
TrendMicro	PE_PIKORAV.SM-O
McAfee-GW-Edition	W32/Fujacks.cm
Trapmine	suspicious.low.ml.score
Sophos	ML/PE-A + Mal/VBDrop-G
SentinelOne	Static AI – Malicious PE
GData	Gen:Win32.QVod.A (2x)
Google	Detected
Avira	W32/Viking.atdc.110
Antiy-AVL	Trojan/Generic.ASCommon.53
Kingsoft	Win32.Heur.KVMH009.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	W32/Fujacks.cm
MAX	malware (ai score=86)
VBA32	TrojanDownloader.Jeehoo
Malwarebytes	Nimnul.Virus.FileInfector.DDS
TrendMicro-HouseCall	PE_PIKORAV.SM-O
Rising	Win32.Viking.k (CLASSIC)
Yandex	Trojan.GenAsa!udikpZMm8lk
Ikarus	Worm.Win32.VBNA
MaxSecure	Virus.W32.Qvod.B
Fortinet	W32/Qvod.BE!tr
BitDefenderTheta	Gen:NN.ZevbaF.34646.im3@amX2unpb
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.9bba5f
Panda	Trj/CI.A