How to remove “Win32/Agent_AGen.CQD”?

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: A7DFFB622B635F8F53CE.mlw
path: /opt/CAPEv2/storage/binaries/d89ffafe022c0dc860c4db1b1ae634d6da930e42de455cbfa9a7416d3ff7047c
crc32: C35B59F4
md5: a7dffb622b635f8f53cec424f181fd7c
sha1: 64399b79967c55a3d3b44ab1c7d64172de93f2f5
sha256: d89ffafe022c0dc860c4db1b1ae634d6da930e42de455cbfa9a7416d3ff7047c
sha512: 11f6e58974d0f660cdd4f029ec9b7c632b94949e8af726e7451f1b246826785b2b76d0c0f0f575a67d7e189cd27a367d48fe2042e604019a08f7c65452da70c8
ssdeep: 384:x6qvAyf5I5I5I5I5I5I5I5I5I5ImVVVVVaRmZr6pDE045H:x6wAO++++++++++lREoA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15F032A3754CC57B2FC191AB35FB6ADC7408233746F886B1DCA5F48B47DA82882B4C696
sha3_384: 7f8a09a58a8d413a289e39c03f4b3d4c981522e80403b5413dff178498e75721e3e1e18c238c58ddf36925113c795d24
ep_bytes: 18a4436f84e162aebdcce617ffa96667
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Cerbu.173465
FireEye	Generic.mg.a7dffb622b635f8f
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!A7DFFB622B63
Cylance	unsafe
Zillya	Trojan.AgentAGen.Win32.47296
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Generic.35b21f35
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
BitDefender	Gen:Variant.Cerbu.173465
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Patched.kd
Emsisoft	Gen:Variant.Cerbu.173465 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Cerbu.173465
Sophos	Mal/Generic-S
Ikarus	Trojan.Patched
GData	Gen:Variant.Cerbu.173465
Google	Detected
Avira	TR/Patched.Ren.Gen
Varist	W32/S-9bdefeb6!Eldorado
Antiy-AVL	Trojan/Win32.Sabsik
Kingsoft	Win32.Troj.Unknown.a
Arcabit	Trojan.Cerbu.D2A599
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaE.36744.cmY@aihbphl
ALYac	Gen:Variant.Cerbu.173465
MAX	malware (ai score=89)
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R03BH0CK523
Rising	Trojan.Generic@AI.100 (RDML:C4mxRMGbKRxf2SWtJ09IQg)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.9967c5
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X