Win32/Agent_AGen.CQD information

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 27B2569CE0264989DE97.mlw
path: /opt/CAPEv2/storage/binaries/559d7eedbf065b086395217041fda52736cb201319fbe299df103dba9e4ad45b
crc32: 1D3AB23B
md5: 27b2569ce0264989de97ab339f6736a0
sha1: 197973a9063b7bf65e0e03e90304f10c18f8c7a8
sha256: 559d7eedbf065b086395217041fda52736cb201319fbe299df103dba9e4ad45b
sha512: be1c180beea3ca8105d2e955bf7695ab3335423039faee7b485fe21a169825efd4faf542fd0a340742f6e1be829c44e29e909111e356d839e8bcfc0d298cbce6
ssdeep: 192:tV0IzOFVOlRZdxa7wkoJOE4Zh52jOfMdgbqDE045HQ:tVRsOlzdxL4Zhwi0RDE045H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113033BF519BD1C7CFB0E4632C6842C6E149952A9CC95A9D8C10FC91E9FAF1B2422374B
sha3_384: a53861225fa0fb0990cdb0e73b7621d363edeb38b3c0c0155340df7c85e80458574bca408a20aef43f4dc621967eb8e1
ep_bytes: 837c31a73df0b14c72aa40cf6c4d9536
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.465768
FireEye	Generic.mg.27b2569ce0264989
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!27B2569CE026
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.465768
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.9063b7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Cynet	Malicious (score: 100)
Rising	Trojan.Generic@AI.100 (RDML:cmtelJVoO4pib6+rQM426Q)
Emsisoft	Gen:Variant.Zusy.465768 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Zusy.465768
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Patched
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=87)
Kingsoft	malware.kb.a.999
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Arcabit	Trojan.Zusy.D71B68
GData	Gen:Variant.Zusy.465768
Google	Detected
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJU23
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X