Win32/Agent_AGen.CQD removal instruction

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 39DA483AFABB95CF1AFE.mlw
path: /opt/CAPEv2/storage/binaries/7068fd415d3ea8d00bfeae6cb1399d8cfba597c49efce0f1fae102f320a921d1
crc32: 1CABFDFB
md5: 39da483afabb95cf1afee05ee2dbf8f3
sha1: ef2e3eb3f4cead5da621350b3b422dde9c8be5a5
sha256: 7068fd415d3ea8d00bfeae6cb1399d8cfba597c49efce0f1fae102f320a921d1
sha512: 632c3f72a945dbb3252c420dc089fdc1fa900ecf2bbdbd7da64734cf53d6652455bec3ff9b2f4c51af691e4fb5f6bbef894c6d0fef2d0e1e38b5fc0f59f1a503
ssdeep: 384:sVUIYgxMwK2WwbcvSG5w7KvqInDE045H:sVUIXxIekS9wA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113035B72A59E1571FF5C6FFB45264BC32660F63A46A98B5D8453F0680E2EE931E80F03
sha3_384: e55398f66273696da728c3f08b7007c2347ee1672c840d1ce476557729c89506cddfb1c9ba83ae234fe43c91d4ab5f08
ep_bytes: 877a7d54c69e94e2cf0f38f60adad62c
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Cerbu.173465
FireEye	Generic.mg.39da483afabb95cf
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!39DA483AFABB
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Cerbu.173465
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:81HXC3J68K2cQpg0lzwjiw)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Cerbu.173465
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Cerbu.173465 (B)
Ikarus	Trojan.Patched
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Arcabit	Trojan.Cerbu.D2A599
GData	Gen:Variant.Cerbu.173465
Google	Detected
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
ALYac	Gen:Variant.Cerbu.173465
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJU23
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.3f4cea
Avast	Win32:Evo-gen [Trj]

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X