Win32/Agent_AGen.AQQ removal tips

The Win32/Agent_AGen.AQQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.AQQ virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.AQQ?


File Info:
name: BBCB20E939B0DFC40A32.mlw
path: /opt/CAPEv2/storage/binaries/c7c68ca442faf7ed979821d273a9e86dd4811432dec9de3e37ab02d6e80325eb
crc32: 22DF1758
md5: bbcb20e939b0dfc40a320667296012a4
sha1: f8b1a9e30b58c1e78b54e80279d2bbd7eb18b0a3
sha256: c7c68ca442faf7ed979821d273a9e86dd4811432dec9de3e37ab02d6e80325eb
sha512: 9f66613dd8bdb709d43fd7e30404160290316fafcca670e3dd368fdcc2d311af6b7ffd19e484eb24660dbbbdaeaf3c7a1541002825ad0755f3862562ccce245a
ssdeep: 384:7y5WrYxkLFH7GFbG5ZjJ9ZTuDvXx3hOzZw60GIzi0ArJCf:7trYxkLs05xJLTWx3hOFhIG0ArJCf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0F26C17DB2AC072E962443D36A5AF369BFFA5751C04D08AFBC04E4A1CF4ED1AE04207
sha3_384: 851920cd0df61298f3e526304811882c49dff4e24d383711e00aeeef78ce09fc53be044980cf47c312292724d3963ae3
ep_bytes: c0590f85220100008b3558514000897d
timestamp: 2011-07-27 14:04:27

Version Info:
0: [No Data]

Win32/Agent_AGen.AQQ also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.402646
Skyhigh	BehavesLike.Win32.Generic.nt
McAfee	GenericRXAA-FA!BBCB20E939B0
VIPRE	Gen:Variant.Zusy.402646
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005a37ea1 )
K7GW	Trojan ( 005a37ea1 )
Cybereason	malicious.30b58c
BitDefenderTheta	Gen:NN.ZexaF.36744.cqY@aO63QAe
Symantec	Downloader
ESET-NOD32	a variant of Win32/Agent_AGen.AQQ
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.402646
Avast	Win32:Unruy-AE [Trj]
Emsisoft	Gen:Variant.Zusy.402646 (B)
F-Secure	Trojan.TR/Agent_AGen.ncmvw
TrendMicro	TROJ_GEN.R03BC0DAV24
FireEye	Generic.mg.bbcb20e939b0dfc4
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.402646
Google	Detected
Avira	TR/Agent_AGen.ncmvw
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	malware.kb.a.999
Arcabit	Trojan.Zusy.D624D6
Microsoft	TrojanDownloader:Win32/Unruy.H
AhnLab-V3	Downloader/Win.Unruy.C5411299
ALYac	Gen:Variant.Zusy.402646
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0DAV24
Rising	Downloader.Unruy!8.D8 (TFE:4:3I4BuMTp8BS)
Yandex	Trojan.Agent_AGen!7agyxMCUgYc
Ikarus	Trojan-Downloader.Win32.Unruy
MaxSecure	Trojan.Malware.197603441.susgen
Fortinet	W32/Agent_AGen.AQQ!tr
AVG	Win32:Unruy-AE [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.AQQ?

Win32/Agent_AGen.AQQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X