Win32/Agent_AGen.CQD malicious file

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 95472E073B0647C0594C.mlw
path: /opt/CAPEv2/storage/binaries/fb3da4deeba244ac2cad2f48461f19334c39371d4151762e2513b5a180242fda
crc32: 08AF8181
md5: 95472e073b0647c0594c11801bb39d98
sha1: 1775edbc6111cd022bf1523cb37143c7bbfbbbdf
sha256: fb3da4deeba244ac2cad2f48461f19334c39371d4151762e2513b5a180242fda
sha512: 6e5a2a5e3be619bed5e524f156977a178ed962aadaa96e07737cbd066045db483e1cdc56d39f44edadfbb4b82dbfed230a39ab26edf42d6351bdccade6b6f51d
ssdeep: 96:LXN8aOskB9YayqeZTgC5zrsUjbRefYC1wx2zAkG+QJv9SN2fsXVXVXVXVXVXVXVO:OaOsbXGIzrsUpAdegskW9fjPehP2D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12A033CE39DA4D8F5C9780D310DF3EDC54B658171BB848EE1207E57FEF980A362256618
sha3_384: d1a437a82ca49db76fe5616e73fc6a3f98515ba152031877b9dceb2d1342478a90fc94365670414a7c201fd7385da5cf
ep_bytes: 070097202b439376448ffd177ec700ea
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Cerbu.173465
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!95472E073B06
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.c6111c
Arcabit	Trojan.Cerbu.D2A599
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Cerbu.173465
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Patched.kd
Emsisoft	Gen:Variant.Cerbu.173465 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Cerbu.173465
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.95472e073b0647c0
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=85)
Kingsoft	malware.kb.a.999
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Cerbu.173465
Google	Detected
ALYac	Gen:Variant.Cerbu.173465
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CKH23
Rising	Trojan.Generic@AI.100 (RDML:Vz2OWMMiRFsWmgkxEKlXrA)
Ikarus	Trojan.Patched
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X