Win32/Agent_AGen.CQD removal guide

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 98741B93B7A7810201FC.mlw
path: /opt/CAPEv2/storage/binaries/34a2a6937a03c68ee3575f27d4b832ec63007fe61592da99a7efdf665b752226
crc32: FD41D990
md5: 98741b93b7a7810201fc459b601ada5e
sha1: b279e45e4401f497f5b9a8d322b5089ddee6702c
sha256: 34a2a6937a03c68ee3575f27d4b832ec63007fe61592da99a7efdf665b752226
sha512: f9e84d72dc022d795836a5e93eaa24c8f01870e0afc863d93256b638de3ccd30e03f0b8b4298f2d555f5bd7ddc61616d984522f45572ef2f1109e139ceeae55f
ssdeep: 384:hR4LbWoU+qbLdSCX66R7EuTldce8/zqkATla8kWDJaJDE045H4WWWW:D4BUdPtdV/EL5ATl3wpAOWWWW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F1038EE5485F1012FBAE8AF7632783E2C157736465A20888445AE61C8F7DD1E1F50B9F
sha3_384: 7352383795aeb2d8d40d056ceb8e50bf0642a03bd77a0725a3a7dc51e58ec96fbc8d306262a28d9a00eede9eace1248a
ep_bytes: d2bcd413d312146a6d35bfb2f1792ccf
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Cerbu.173465
FireEye	Generic.mg.98741b93b7a78102
Skyhigh	BehavesLike.Win32.Generic.pz
ALYac	Gen:Variant.Cerbu.173465
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Cerbu.173465
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.e4401f
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Cerbu.173465
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Cerbu.173465 (B)
Ikarus	Trojan.Patched
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
Kingsoft	malware.kb.a.1000
Arcabit	Trojan.Cerbu.D2A599
GData	Gen:Variant.Cerbu.173465
Google	Detected
Acronis	suspicious
MAX	malware (ai score=86)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CK623
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X