Should I remove “Win32/Agent.QFD”?

The Win32/Agent.QFD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.QFD virus can do?

Authenticode signature is invalid

How to determine Win32/Agent.QFD?


File Info:
name: 8CBC544BC7DD0EDAA3E9.mlw
path: /opt/CAPEv2/storage/binaries/e65080761a213ab9f5720b9a0a0cc12dfb8fcceefdd62296fadc8e1bd045a492
crc32: 76BFAE38
md5: 8cbc544bc7dd0edaa3e9937dee6f09d7
sha1: ccc09fecdfd1097f001770b8e3b2752e9063a524
sha256: e65080761a213ab9f5720b9a0a0cc12dfb8fcceefdd62296fadc8e1bd045a492
sha512: 3b17d24d8a0f292f16b4e376d9380b4e038ec890883d2dfe7c1bbaa80b178b9f6c4a5c14ec688ec4cf1473bc6333351259c65c63b1e2b807476abaddd7cecfe3
ssdeep: 384:AXJ8fZCuf1wSW8PmTe/SKCR15ml1c7VovTZWTSQBAq9myBtnJUdjG6AF1BaAch0D:AZ8xvmSf8e/iomQWTbM4tWxw1BaZh8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F1F27E3269A08DB6DB4194F259B65B37EBBEE112071499C3C721EED27C30690953B34B
sha3_384: 98c7ec3810b4ad2f4ed98d5b06c37b40056190db5d6e3b1afa9b4d13ade536f69801815d6bbdd279e579c959f438c8ab
ep_bytes: 558bec6aff6880c14000683840400064
timestamp: 2009-10-03 20:49:06

Version Info:
0: [No Data]

Win32/Agent.QFD also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Multi.Generic.4!c
FireEye	Generic.mg.8cbc544bc7dd0eda
McAfee	Artemis!8CBC544BC7DD
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Malex.deb79a3f
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Agent.QFD
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Scar.jslg
DrWeb	Trojan.Siggen.432
McAfee-GW-Edition	BehavesLike.Win32.Generic.nh
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Scar.ym
ViRobot	Trojan.Win32.Scar.65536
Microsoft	Trojan:Win32/Wacatac.B!ml
TrendMicro-HouseCall	TROJ_GEN.R03BH0DKO21
Rising	Trojan.Generic@ML.89 (RDML:88vfJ60wDktbOHYKlSfDEw)
Ikarus	Trojan.Win32.Malex

How to remove Win32/Agent.QFD?

Win32/Agent.QFD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X