Win32/Agent_AGen.CQD removal guide

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 7C7714A0C266F728C921.mlw
path: /opt/CAPEv2/storage/binaries/2e085d6de347e093fcd9773760d28a79a35bf00b98c5c163b3db32ee7cd19da4
crc32: A070E313
md5: 7c7714a0c266f728c9219bb1005283ad
sha1: 36d52e051ce5232017059886e73d494b4b13f1f7
sha256: 2e085d6de347e093fcd9773760d28a79a35bf00b98c5c163b3db32ee7cd19da4
sha512: 50a85a677ac420c132d7062c135417e483243ef56e6a4161431f58d50e4c03139cd99e7cced109379d4e6b087ae5c2649950b9ae3feb7d8fbd58c5d886be4d62
ssdeep: 384:0VYafT1dVdcItpUkH9H9H9H9H9H9H9H9H9H9H9H9H9H9H9HcppDE045H:0VJ/lp/dddddddddddddddqJA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BE031C702CAD0CDAF20C56BF811B67C4F07DF0D959D15122561AEA203DB899A6793F2B
sha3_384: 1fb03f483bcb9291c91ed702c86bf1b4579b131e695c2a225cd94bcea3e9e965764ee89944031c1eb4450d4608d1df4a
ep_bytes: f1a37e1f45038c07e60a16ce43ac073b
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Cerbu.173465
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!7C7714A0C266
Malwarebytes	MachineLearning/Anomalous.96%
VIPRE	Gen:Variant.Cerbu.173465
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Cerbu.173465
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.51ce52
BitDefenderTheta	Gen:NN.ZexaF.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:WJPcYFGE80DaToJAdY3MLA)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Zillya	Trojan.AgentAGen.Win32.15986
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.7c7714a0c266f728
Emsisoft	Gen:Variant.Cerbu.173465 (B)
Ikarus	Trojan.Patched
Google	Detected
Avira	TR/Patched.Ren.Gen
Varist	W32/S-9bdefeb6!Eldorado
Kingsoft	malware.kb.a.997
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Arcabit	Trojan.Cerbu.D2A599
GData	Gen:Variant.Cerbu.173465
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Cerbu.173465
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJU23
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X