Malware

Win32/Agent_AGen.CQD removal guide

Malware Removal

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:

name: BAFE72A59D389A87D55D.mlw
path: /opt/CAPEv2/storage/binaries/746940f016a9de33eba162dbef79bb1852661fc816adff688b3e96b918758214
crc32: A152006D
md5: bafe72a59d389a87d55df67314f865c7
sha1: 43f23e2d8068eb29baec8d51c5c94f01124ae087
sha256: 746940f016a9de33eba162dbef79bb1852661fc816adff688b3e96b918758214
sha512: 6632747239685170b0827ae72e670f0270b6657d15d588bc6b1a4aa911a40b2073fdf6004c0439856c3651b1c76e42d8702675d72ed3cca5d66268445de8b66a
ssdeep: 384:KQl2OC4kEi2gtbeh/lltHy2M+usxDE045H7:ol4kEngtwrtSKjBA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A1527DF2DD7E29A7FE4E4BFB82A74CE3A84571721B854C0C890FA14C4F64A453B62207
sha3_384: d8eb5c997801accae4fb25cafa96808768e02f7bfa9b0bfc884b77cc632d9587765e5882500c3efbb232045733ce4762
ep_bytes: 5053b899040000b9984440008a1980eb
timestamp: 2007-07-24 01:52:49

Version Info:

0: [No Data]

Win32/Agent_AGen.CQD also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Poison.labP
MicroWorld-eScanTrojan.Ransom.Poison.B
FireEyeGeneric.mg.bafe72a59d389a87
SkyhighBehavesLike.Win32.Generic.lc
McAfeeGenericRXTL-LJ!BAFE72A59D38
Cylanceunsafe
ZillyaTrojan.AgentAGen.Win32.11094
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0059befd1 )
AlibabaTrojan:Win32/Grandoreiro.d74728c7
K7GWTrojan ( 0059befd1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Ransom.Poison.B
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.CQD
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.VB.gen
BitDefenderTrojan.Ransom.Poison.B
NANO-AntivirusTrojan.Win32.VB.juiskq
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.VB.kn
SophosMal/ExeSax-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.PackedENT.124
VIPRETrojan.Ransom.Poison.B
Trapminemalicious.high.ml.score
EmsisoftTrojan.Ransom.Poison.B (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Generic.bghcg
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLGrayWare/Win32.Krap.cku
Kingsoftmalware.kb.a.999
XcitiumHeur.Packed.MultiPacked@1z141z3
MicrosoftTrojan:Win64/Grandoreiro.psyE!MTB
ZoneAlarmHEUR:Trojan.Win32.VB.gen
GDataTrojan.Ransom.Poison.B
VaristW32/Agent.FJT.gen!Eldorado
AhnLab-V3Trojan/Win.LJ.R535457
Acronissuspicious
BitDefenderThetaAI:Packer.44249F861F
ALYacTrojan.Ransom.Poison.B
MAXmalware (ai score=85)
VBA32Malware-Cryptor.General.3
MalwarebytesTrojan.Downloader
RisingTrojan.Generic@AI.100 (RDMK:AF3bhg4T9FzF9LiCdYM8jw)
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.C40A!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment