What is “Win32/Agent_AGen.CQD”?

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: B868BC0D0051824E5528.mlw
path: /opt/CAPEv2/storage/binaries/f5df3fdd81f96ebb9d380a4612bbddeff84e023b417cb259a0af20202cfc3e8d
crc32: 9739FC24
md5: b868bc0d0051824e5528d44f65712c29
sha1: 608b00700117f6c31fdf92d6f7245ae68e6b6b4b
sha256: f5df3fdd81f96ebb9d380a4612bbddeff84e023b417cb259a0af20202cfc3e8d
sha512: e7972de4875f756d81548a6b1088ff09f898c018f87f2c6aaa05fbace6f916457cb48c44027b6bf3e6120f2dd68c4056ed427a5bc2777f6c649a64ecea04f81c
ssdeep: 192:I1HAsfrYgifeuphWSBNER6DeZhIjWU6DqDE045HQJOggBg7mVi:I1ACr/qphWSIRssWW1GDE045HWgBga
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14203F932587CC433FC1A87B535210DEE09EABBBA5EC3629A878DE1C52E15092371479F
sha3_384: 787db781e82d65281b4e052cdd18ef45392cac1c3d24532a2a0156e65e319e959bf335a218362af0abb82f4388ed7f30
ep_bytes: c46a61a8f3e53a3b13a307ba58251e33
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Cerbu.173465
FireEye	Generic.mg.b868bc0d0051824e
Skyhigh	BehavesLike.Win32.Generic.pz
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Gen:Variant.Cerbu.173465
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Cerbu.D2A599
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Cerbu.173465
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Patched.kd
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Cerbu.173465 (B)
Ikarus	Trojan.Patched
Varist	W32/S-9bdefeb6!Eldorado
Avira	TR/Patched.Ren.Gen
Kingsoft	malware.kb.a.996
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Cerbu.173465
Google	Detected
Acronis	suspicious
ALYac	Gen:Variant.Cerbu.173465
MAX	malware (ai score=83)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CLO23
Rising	Trojan.Generic@AI.100 (RDML:jYJ/Dfbs2smdZH47I53OLw)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
BitDefenderTheta	Gen:NN.ZexaE.36608.cmY@aihbphl
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.00117f
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X