What is “Win32/Agent.QZE”?

The Win32/Agent.QZE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.QZE virus can do?

Unconventionial language used in binary resources: Korean
Authenticode signature is invalid

How to determine Win32/Agent.QZE?


File Info:
name: 10752F067E83BB661675.mlw
path: /opt/CAPEv2/storage/binaries/d04470d2dc7a55a8dd77544edc5e2e471ae99af4cd07f10f9220943c4fe7eb2d
crc32: 397CC2D7
md5: 10752f067e83bb6616754539534e841d
sha1: 726f0abe52c278c46be9b3d0b3aa620ee1e9f505
sha256: d04470d2dc7a55a8dd77544edc5e2e471ae99af4cd07f10f9220943c4fe7eb2d
sha512: c5f69747440efd24eadd383963f9f7e8718e700596586f622af4a32b096a10f4aed02a7ab68f7dd50d514bb19e6556ffbd95fa61a458ca9d882466e38e048514
ssdeep: 6144:uC4Wew58O/4il5uPKRYlqs50qcHLml0w6qMe2TQ58C:uwGO/4qsaY8SgHa6qMe2T
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16B447C2233E1C477D2A311724EE28BAA72BDFD604B32879733943B0E9E756D29635351
sha3_384: d23f0c8acc27fa9cb608b8b7ea18fd72b14bed407cf244ea35128b4f4aa1a9d9283aabb054f87aa8b5a4b71c59a425a1
ep_bytes: 6a606878fb4200e8450a0000bf940000
timestamp: 2010-05-30 13:33:29

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: SSubFile.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: SSubFile.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1

Win32/Agent.QZE also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38134470
FireEye	Generic.mg.10752f067e83bb66
McAfee	Artemis!10752F067E83
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Trojan-Downloader.Win32.Agent
BitDefender	Trojan.GenericKD.38134470
Cyren	W32/Trojan.OLVX-7132
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.QZE
TrendMicro-HouseCall	TROJ_GEN.R01E1G4
ClamAV	Win.Trojan.Agent-813163
Kaspersky	Trojan-Downloader.Win32.Agent.dscr
Alibaba	TrojanDownloader:Win32/Generic.9abcdf80
Ad-Aware	Trojan.GenericKD.38134470
Emsisoft	Trojan.GenericKD.38134470 (B)
Comodo	Malware@#1234c01whr573
DrWeb	Trojan.DownLoader1.19065
Zillya	Downloader.Agent.Win32.63258
TrendMicro	TROJ_GEN.R01E1G4
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dm
APEX	Malicious
Jiangmin	TrojanDownloader.Agent.bxyk
eGambit	Unsafe.AI_Score_99%
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.FDB5C1
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.38134470
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Titll.Gen
ALYac	Trojan.GenericKD.38134470
Ikarus	Trojan-Dropper.Agent
Panda	Generic Malware
Tencent	Win32.Trojan-downloader.Agent.Dvpt
Fortinet	W32/Agent.XIU!tr.dldr
Webroot	W32.Malware.Gen

How to remove Win32/Agent.QZE?

Win32/Agent.QZE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X