Malware

Win32/Agent_AGen.CQD (file analysis)

Malware Removal

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:

name: 5C97F265B9DBFD0D9F3A.mlw
path: /opt/CAPEv2/storage/binaries/b9fc1d31238f4648f1e258494f09b039b4b18ea8faec264c494d176144e750ee
crc32: D743E07D
md5: 5c97f265b9dbfd0d9f3af445eb8bb431
sha1: 78dcd151d1de1ec3c271ca02bd71591b1138db1e
sha256: b9fc1d31238f4648f1e258494f09b039b4b18ea8faec264c494d176144e750ee
sha512: 84d53b3e8c18a88f5be0062dd5252956fa60d8b8ba27ac002d479cc7c1d19172ff572b966d506c6c0b73e2815135c5a9c6b505805578c41bab6d046484cbbaa0
ssdeep: 384:Sw8mJVIiLpbbbbbbbbbbbAExRNADE045He11111111:SwDrIwpbbbbbbbbbbbAEx+AU11111111
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1585218B1506E183DF7ED83F7022F8AD3027C99A661C00D1D889FE6956E9D94CE854F2B
sha3_384: 3ec0602d14a1a593209dfe711b60f05343be43ab21aae721dbcaa968b2f192a14dbe9f5d5b03e21c2ea87367de6f7065
ep_bytes: 5053b899040000b9984440008a1980eb
timestamp: 2007-07-24 01:52:49

Version Info:

0: [No Data]

Win32/Agent_AGen.CQD also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Poison.labP
DrWebTrojan.PackedENT.124
MicroWorld-eScanTrojan.Ransom.Poison.B
FireEyeGeneric.mg.5c97f265b9dbfd0d
SkyhighBehavesLike.Win32.Generic.lc
ALYacTrojan.Ransom.Poison.B
MalwarebytesTrojan.Downloader
VIPRETrojan.Ransom.Poison.B
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0059befd1 )
BitDefenderTrojan.Ransom.Poison.B
K7GWTrojan ( 0059befd1 )
Cybereasonmalicious.1d1de1
BitDefenderThetaAI:Packer.44249F861F
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.CQD
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.VB.gen
AlibabaTrojan:Win32/Grandoreiro.07b14014
NANO-AntivirusTrojan.Win32.VB.juiskq
TencentTrojan.Win32.VB.xhae
SophosMal/ExeSax-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen
TrendMicroTROJ_GEN.R03BC0DK723
Trapminemalicious.high.ml.score
EmsisoftTrojan.Ransom.Poison.B (B)
IkarusVirus.Win32.VB.FEW
JiangminTrojan/Generic.bghcg
VaristW32/Agent.FJT.gen!Eldorado
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLGrayWare/Win32.Krap.cku
XcitiumHeur.Packed.MultiPacked@1z141z3
ArcabitTrojan.Ransom.Poison.B
ZoneAlarmHEUR:Trojan.Win32.VB.gen
GDataTrojan.Ransom.Poison.B
GoogleDetected
AhnLab-V3Trojan/Win.LJ.R535457
Acronissuspicious
McAfeeGenericRXTL-LJ!5C97F265B9DB
MAXmalware (ai score=83)
DeepInstinctMALICIOUS
VBA32Malware-Cryptor.General.3
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DK723
RisingTrojan.Generic@AI.100 (RDMK:7CgKzIezkXLgbgB4lcV1Sw)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.C40A!tr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment