Malware

What is “Win32/Agent_AGen.CQD”?

Malware Removal

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:

name: 53484B037E813434DB45.mlw
path: /opt/CAPEv2/storage/binaries/aeb5274809bcbfd6929beee365fe2fa179c427275e0b69edfa938fd496e82504
crc32: 5B539EE6
md5: 53484b037e813434db4593b3c5cb7384
sha1: 4066e909fd1361fc76284affb20e479a08a292cf
sha256: aeb5274809bcbfd6929beee365fe2fa179c427275e0b69edfa938fd496e82504
sha512: fd4c12060ab6587be66c79c92cd1ce806d36be9557eeba6dc96cb9a98fb18ad4fa901b016e6cf223727f291a51fcaaa2c35f05a51879b317ea3d6170732e5c41
ssdeep: 384:RSvLRqVubz+o+o+o+o+o+o+C52d2d2d2d2U0DLSDE045HdEEE:ov08bijjjjjj9AAzEEE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T178527DFF305D9127EACF47FB013589D654823631BAE2460E6D42EAA82E1C789E51970F
sha3_384: bcf644a20fdfcc7e67f2176a3236e3a5db08b0c52da441ad07a0a94e58a4729a3305277b697888a972d6f5f3e01659a9
ep_bytes: 5053b899040000b9984440008a1980eb
timestamp: 2007-07-24 01:52:49

Version Info:

0: [No Data]

Win32/Agent_AGen.CQD also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.Poison.B
FireEyeGeneric.mg.53484b037e813434
SkyhighBehavesLike.Win32.Generic.lc
McAfeeGenericRXTL-LJ!53484B037E81
MalwarebytesTrojan.Downloader
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0059befd1 )
BitDefenderTrojan.Ransom.Poison.B
K7GWTrojan ( 0059befd1 )
Cybereasonmalicious.9fd136
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent_AGen.CQD
APEXMalicious
KasperskyHEUR:P2P-Worm.Win32.Convagent.gen
NANO-AntivirusTrojan.Win32.VB.juiskq
RisingTrojan.Generic@AI.100 (RDMK:hWgJht8PqBrTopr62ao1aw)
EmsisoftTrojan.Ransom.Poison.B (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.PackedENT.124
VIPRETrojan.Ransom.Poison.B
Trapminemalicious.high.ml.score
SophosMal/ExeSax-A
IkarusVirus.Win32.VB.FEW
JiangminTrojan/Generic.bghcg
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
VaristW32/Agent.FJT.gen!Eldorado
Antiy-AVLGrayWare/Win32.Krap.cku
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win64/Grandoreiro.psyE!MTB
XcitiumHeur.Packed.MultiPacked@1z141z3
ArcabitTrojan.Ransom.Poison.B
ZoneAlarmHEUR:P2P-Worm.Win32.Convagent.gen
GDataTrojan.Ransom.Poison.B
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.LJ.R535457
Acronissuspicious
BitDefenderThetaAI:Packer.44249F861F
ALYacTrojan.Ransom.Poison.B
MAXmalware (ai score=87)
DeepInstinctMALICIOUS
VBA32Malware-Cryptor.General.3
Cylanceunsafe
TencentTrojan.Win32.VB.xhae
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.C40A!tr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment