Win32/Agent.ACXV removal guide

The Win32/Agent.ACXV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.ACXV virus can do?

Authenticode signature is invalid

How to determine Win32/Agent.ACXV?


File Info:
name: CBBE4FDD7B4DBCEF376D.mlw
path: /opt/CAPEv2/storage/binaries/7ca5d79cb4210f63a8db753a1f46fc02adac23c42506c8b20218e4ea169e8b97
crc32: 4EEF1A58
md5: cbbe4fdd7b4dbcef376d121d85f7057c
sha1: 54995bc8039e6a7c62d3151ae38eae2eb112e5c2
sha256: 7ca5d79cb4210f63a8db753a1f46fc02adac23c42506c8b20218e4ea169e8b97
sha512: af347df253298431349a9dc53407c3d8e5052bbb393fceb687812d4a07ea2dea410987aa4897308eadb374ca5ed57fc39227f5bd4fcab99c4e377afecf5724b6
ssdeep: 6144:TqRDqM1Fc4DI5M6LA+ii6seld6Qu/i8harAOXF2j:TqcoDIvLliiWpu/iKarSj
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14F447E543591C472E861147108E4ABF6857D7D281B65A9FF67E44F3FCF302C2AA33A2A
sha3_384: 83ebbe8648b8abcd9d0548e98234b38aa5c77eb40166e9af91672fe667e9b40fc0973f3fd90547694a125c24e226bb9a
ep_bytes: e80c080000e974feffff8b4df464890d
timestamp: 2021-04-14 14:47:11

Version Info:
0: [No Data]

Win32/Agent.ACXV also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Ulise.4!c
MicroWorld-eScan	Trojan.GenericKDZ.74172
FireEye	Generic.mg.cbbe4fdd7b4dbcef
CAT-QuickHeal	Trojan.GluptebaRI.S19890519
McAfee	GenericRXAA-AA!CBBE4FDD7B4D
Malwarebytes	Neshta.Virus.FileInfector.DDS
Zillya	Trojan.Agent.Win32.2015202
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.ad0278af
K7GW	Trojan ( 0057a8c31 )
K7AntiVirus	Trojan ( 0057a8c31 )
Cyren	W32/Agent.CPG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.ACXV
APEX	Malicious
Cynet	Malicious (score: 99)
BitDefender	Trojan.GenericKDZ.74172
NANO-Antivirus	Trojan.Win32.Ulise.itzroy
Avast	Win32:PWSX-gen [Trj]
Tencent	Win32.Trojan.Agen.Ztjl
Emsisoft	Trojan.GenericKDZ.74172 (B)
F-Secure	Heuristic.HEUR/AGEN.1318636
VIPRE	Trojan.GenericKDZ.74172
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
GData	Trojan.GenericKDZ.74172
Jiangmin	Trojan.Agentb.kfy
Avira	HEUR/AGEN.1318636
Antiy-AVL	Trojan/Win32.Agent
Arcabit	Trojan.Generic.D121BC
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win.Generic.R415764
VBA32	Trojan.Convagent
ALYac	Trojan.GenericKDZ.74172
MAX	malware (ai score=82)
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Agent!8.B1E (TFE:5:fBzHstFJtQS)
Yandex	Trojan.Agent!phG9CimW/7s
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.116910992.susgen
Fortinet	W32/Agent.ACXV!tr
BitDefenderTheta	Gen:NN.ZexaF.36662.puW@aCkFAqgi
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/Agent.ACXV?

Win32/Agent.ACXV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X