Worm

About “Worm.Win32.Qvod.ank” infection

Malware Removal

The Worm.Win32.Qvod.ank is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Win32.Qvod.ank virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Worm.Win32.Qvod.ank?


File Info:

name: EC198EF09136CD849991.mlw
path: /opt/CAPEv2/storage/binaries/ffb8931b83eec73e657db5495b8fe08be0925bdb7cc3e23161bd4c3e477b512f
crc32: F324702A
md5: ec198ef09136cd849991d76dc4f571c5
sha1: 2a0277a1333e764f2f2560a035ddcde5b532f7cb
sha256: ffb8931b83eec73e657db5495b8fe08be0925bdb7cc3e23161bd4c3e477b512f
sha512: 733f562fbdfcac2f29a3e599e4819ec3f4aaf4e8e1e60607dc45e39d91241d74538c129cfd67c469685ce2386622b78d59b423b4157b91fccb741f3f8c9f9024
ssdeep: 1536:YWYHXSO3bDpPzdlH6s2EDeN50juNyxexFlU0wuKcsNzt2H1f5gxqppoO26c:VYHXxRbPHiEIqlQxPwu7sNz0f5g3t6c
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1189302E066E515A9F68E0F3150341E272429DD5D0F35AF9C0A4A3E373B7EB9A70B1711
sha3_384: 1f26798870bfbb28a4c249a1660ab5d74567e20a699a50f5452213f6d6adbc513ecfb998f8d9f414ad64fafa341afe63
ep_bytes: b80030420068a9f0400064ff35000000
timestamp: 2010-07-07 14:43:14

Version Info:

CompanyName: Shenzhen QVOD Technology Co.,Ltd
FileDescription: QvodInstall Module
FileVersion: 3, 0, 0, 0
InternalName: QvodInstall.exe
LegalCopyright: Copyright(C) 2006-2009 QVOD
OriginalFilename: QvodInstall.exe
ProductName: QvodInstall Module
ProductVersion: 3, 0, 0, 0
Translation: 0x0409 0x04b0

Worm.Win32.Qvod.ank also known as:

BkavW32.QvodQKA.Fam.Worm
Elasticmalicious (high confidence)
DrWebTrojan.Siggen6.3881
MicroWorld-eScanGen:Win32.QVod.A
FireEyeGeneric.mg.ec198ef09136cd84
CAT-QuickHealExploit.ShellCode.Gen
ALYacGen:Win32.QVod.A
CylanceUnsafe
SangforWorm.Win32.Qvod.ank
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaWorm:Win32/ShellCode.170f8d1d
BitDefenderThetaGen:NN.ZexaF.34182.fqueayQ0rnfb
CyrenW32/Pikorms.A.gen!Eldorado
SymantecW32.Wapomi.B
ESET-NOD32a variant of Win32/Wapomi.K
ZonerProbably Heur.ExeHeaderP
TrendMicro-HouseCallPE_PIKORAV.SM-O
ClamAVWin.Trojan.Wapomi-5
KasperskyWorm.Win32.Qvod.ank
BitDefenderGen:Win32.QVod.A
NANO-AntivirusTrojan.Win32.Agent.boohc
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastWin32:AutoRun-CTB [Trj]
SophosML/PE-A + Mal/Emogen-Y
ComodoBackdoor.Win32.Qvod.~IC@1vk6eh
BaiduWin32.Trojan.KillAV.c
VIPREWorm.Win32.Qvod.ank (v)
TrendMicroPE_PIKORAV.SM-O
McAfee-GW-EditionBehavesLike.Win32.CoinMiner.nc
EmsisoftGen:Win32.QVod.A (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm/Qvod.t
AviraW32/Viking.atdc.112
MAXmalware (ai score=89)
Antiy-AVLTrojan/Generic.ASMalwS.B8BD
MicrosoftExploit:Win32/ShellCode!ml
ViRobotWorm.Win32.A.Qvod.92529
GDataGen:Win32.QVod.A
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Qvod.R2044
McAfeeGeneric Dropper.uk
VBA32BScope.Trojan.SvcHorse.01643
MalwarebytesTrojan.Dropper
APEXMalicious
TencentTrojan.Win32.Qvod.aw
YandexTrojan.GenAsa!udikpZMm8lk
IkarusWorm.Win32.Pikorms
FortinetW32/Generic.AC.7131B!tr
AVGWin32:AutoRun-CTB [Trj]
PandaTrj/Genetic.gen

How to remove Worm.Win32.Qvod.ank?

Worm.Win32.Qvod.ank removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment