Should I remove “Win32/Agent.ADPG”?

The Win32/Agent.ADPG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.ADPG virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Win32/Agent.ADPG?


File Info:
name: 1CB164AF199BA4C8CB6B.mlw
path: /opt/CAPEv2/storage/binaries/d98f2565fc31d1c6181c4444decea9d0fa7af36b10241480048ae4ce3abfeac5
crc32: FEC34AE6
md5: 1cb164af199ba4c8cb6b257922a41ba0
sha1: 9654e17a2b9fe027b5de3c184fac85248887a9ba
sha256: d98f2565fc31d1c6181c4444decea9d0fa7af36b10241480048ae4ce3abfeac5
sha512: 49f0563fa3f94ea1d1dda3b75cdb113346c7f45c90356b651beb5b62f3b1c0ae311069667064cdecea640243ea35b9c49d891f6fc00469f6e137402ee5f13340
ssdeep: 98304:J12089zQVoeo/WPDJmp5L9cHBFmPA8ETMUIq:JfiQVoAz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177468E01F29341B6EB8E2530046A77395A359B984F32DFF7A724ED19C933193683B61E
sha3_384: fb589302093edc874ce76e7a07357ae73633d9dce4b06b308a268480646630d924843b77fd4de452570cd5463cb5d947
ep_bytes: 558bece8f6000000ff30e85000000050
timestamp: 2007-09-29 14:48:52

Version Info:
Comments: 
CompanyName: 
FileDescription: Foxit Reader, Best Reader for Everyday Use!
FileVersion: 2, 2, 2007, 2129
InternalName: FoxitReader.exe
LegalCopyright: Copyright (C) 2005-2007 Foxit Software Company 
LegalTrademarks: 
OriginalFilename: FoxitReader.EXE
PrivateBuild: 
ProductName: Foxit Reader
ProductVersion: 2, 2, 2007, 2129
SpecialBuild: 
Translation: 0x0409 0x04b0

Win32/Agent.ADPG also known as:

MicroWorld-eScan	Trojan.GenericKD.47459965
CAT-QuickHeal	Trojan.Win32
ALYac	Trojan.Agent.2272746A
K7AntiVirus	Trojan ( 005894d91 )
BitDefender	Trojan.GenericKD.47459965
K7GW	Trojan ( 005894d91 )
Arcabit	Trojan.Generic.D2D42E7D
ESET-NOD32	Win32/Agent.ADPG
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.Agent
NANO-Antivirus	Virus.Win32.Gen.ccmw
Ad-Aware	Trojan.GenericKD.47459965
Emsisoft	Trojan.GenericKD.47459965 (B)
DrWeb	Trojan.Loader.918
Zillya	Trojan.Agent.Win32.2527807
TrendMicro	Trojan.Win32.XOFLOADR.AA
McAfee-GW-Edition	Generic trojan.op
FireEye	Trojan.GenericKD.47459965
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Agent
Webroot	W32.Agent.Gen
Avira	TR/Agent.cmplw
MAX	malware (ai score=84)
Gridinsoft	Ransom.Win32.Gen.sa
Microsoft	Trojan:Win32/Casdet!rfn
GData	Trojan.GenericKD.47459965
Cynet	Malicious (score: 99)
McAfee	Artemis!1CB164AF199B
VBA32	Trojan.Agent
TrendMicro-HouseCall	Trojan.Win32.XOFLOADR.AA

How to remove Win32/Agent.ADPG?

Win32/Agent.ADPG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X