virus logo Virus

W32/TrojanSpy_Win32_QAKBOT!dam

description-logoAnalysis

W32/TrojanSpy_Win32_QAKBOT!dam is classified as damaged malware.
This detection is for damaged versions of certain malware variants. They may arrive via email and are usually corrupted or truncated, resulting in the files being unable to execute.
The Fortinet Antivirus Analyst Team is constantly updating our descriptions. Please check the FortiGuard Encyclopedia regularly for updates.

recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2021-12-14 89.07763
2021-12-07 89.07553
2021-10-15 89.05963
2021-10-12 89.05877
2021-10-12 89.05874
2021-10-12 89.05872
2021-10-12 89.05866
2021-07-27 87.00933
2021-05-09 86.00047
2021-05-04 85.00929
ID 10003051
Released Feb 15, 2021
Description
Updated		 Feb 15, 2021
Platform Profile Win32 file format / PE 32 bit
Profile Type Damaged Malware (dam)