Win32/Agent_AGen.CQD removal instruction

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: F3861B7FF586256DF217.mlw
path: /opt/CAPEv2/storage/binaries/6c28e4920d169df15468bd1e4241c5eeb79f5f073621f6d1f934647c9c5ff007
crc32: F96CD735
md5: f3861b7ff586256df2170923e4111741
sha1: 582cea7d082f0328064ee1e642a2ea659c39408a
sha256: 6c28e4920d169df15468bd1e4241c5eeb79f5f073621f6d1f934647c9c5ff007
sha512: df9bc2dc1ad455487b1d595eb0a79966dd0f5321c6916d742d82d6fbc9ee828d72387ebe9a1940d0a5981106ff8a22abb45ce21a838fa9aef3abb6a017c6fa4e
ssdeep: 192:bLu3mDvwzZ1T+MUD4LmVpi/5M5M5M5M5M5M5M5M5M5M5M5M5M5M5MuH8wS8Kqntd:O2ac3QRaaaaaaaaaaaaaaRLtyDE045H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B030916045D84B3FF1C7EB3CD260282214AE56D3BC69235402BF5AE2F1F61697A5B2B
sha3_384: baeaff979e727934f63c7b98af3feb9365ba62316888f775f7b37ae3124644eb9feaeb1e0c4e437bf387c50b90124bda
ep_bytes: 3abc0a0ad3c80fb974f0e0450d35e2b2
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Cerbu.173465
FireEye	Generic.mg.f3861b7ff586256d
Skyhigh	BehavesLike.Win32.Generic.pz
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Gen:Variant.Cerbu.173465
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Cerbu.173465
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.d082f0
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:Rg6k+uNXHCB9Bgl4O/4opg)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Cerbu.173465 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Cerbu.173465
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
Arcabit	Trojan.Cerbu.D2A599
Microsoft	Trojan:Script/Phonzy.B!ml
Google	Detected
Acronis	suspicious
ALYac	Gen:Variant.Cerbu.173465
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJU23
Tencent	Trojan.Win32.Patched.kd
Ikarus	Trojan.Patched
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X