Win32/Agent_AGen.CQD removal instruction

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: F7F42BBE0EC03D8F51A4.mlw
path: /opt/CAPEv2/storage/binaries/c8af04f97541ac5bf964e11609a5019cdb278fe8e4aca218fcd065f778fe153c
crc32: C49655A9
md5: f7f42bbe0ec03d8f51a478d2d8295d73
sha1: 87868c24d164f72b5129d4f5b6073600d9be9d21
sha256: c8af04f97541ac5bf964e11609a5019cdb278fe8e4aca218fcd065f778fe153c
sha512: 21138ed71b65d1d366389bd952d521bc16a528662bc93be070fddf957b99c613a7957191fb12fb4b7bd3691dddfcd16bc8d349cedc1d7c0f9e73002dbf634560
ssdeep: 192:XNrRXkixWbK6LCUBCphKPlflf4A9393939393AKKKKKKQlTTqdbIxyqDE045HQ:NdcDL/0vKgqNNNNBTMsfDE045H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100035CA709BC2599F7FE467325336AE590F834B9C890922D409EB7482FFD2910217F1B
sha3_384: 1af45a926eeec8d2d87bcb06f9cf6f9577a2a7dc9bc1b99575325e5293309409e3f2f1ce89938db5da31bf2c51609b78
ep_bytes: 997a9e5088c678f93241e1af0395f917
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.465768
FireEye	Generic.mg.f7f42bbe0ec03d8f
ALYac	Gen:Variant.Zusy.465768
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Gen:Variant.Zusy.465768
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.465768
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Cynet	Malicious (score: 100)
Tencent	Trojan.Win32.Patched.kd
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Zillya	Trojan.AgentAGen.Win32.19412
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.465768 (B)
Ikarus	Trojan.Patched
Avira	TR/Patched.Ren.Gen
Kingsoft	malware.kb.a.999
Arcabit	Trojan.Zusy.D71B68
GData	Gen:Variant.Zusy.465768
Varist	W32/S-9bdefeb6!Eldorado
Acronis	suspicious
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJU23
Rising	Trojan.Generic@AI.100 (RDML:54XUT5ZupMU9kVPDGUso0A)
SentinelOne	Static AI – Malicious PE
Cybereason	malicious.4d164f

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X