Malware

Win32/Agent_AGen.CQD removal tips

Malware Removal

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:

name: 6F3A8E40984D3CE61CE6.mlw
path: /opt/CAPEv2/storage/binaries/f48093eb411cd01707a557777bdb7201a6353fb6d27e352eda6f840979ee8b09
crc32: 5F6F7F64
md5: 6f3a8e40984d3ce61ce6b025db4bf398
sha1: 2ecb8e6ec6c8baeea91855a4f64174fd13b3c9e0
sha256: f48093eb411cd01707a557777bdb7201a6353fb6d27e352eda6f840979ee8b09
sha512: cbfff7d8f5ab0cfca26f568aca12a496a57a0c7896a8b16c21e359d3bd2a95b413a3f1780ed83f882f50552c106716b45c999a31cabbfd17fab8b1cab4b930fc
ssdeep: 384:bjGvSY0agC9EJej0000gwlWQFuX7yDE045HPpBpBpBp:bavSTeEYj0000hdA7fff
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7525CB0691C25B9FF8C87B3A71D66C822993E2B5E52A01A475FE75D1C03ACD3690317
sha3_384: 6439b94ad435b55d9961d597dc5e5c8f3c6e9469dc437880f2af79a15c378e9a51fe1cbd0fa121f97b55e1b28e7f9504
ep_bytes: 5053b899040000b9984440008a1980eb
timestamp: 2007-07-24 01:52:49

Version Info:

0: [No Data]

Win32/Agent_AGen.CQD also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.Ransom.Poison.B
FireEyeGeneric.mg.6f3a8e40984d3ce6
SkyhighBehavesLike.Win32.Generic.lc
McAfeeGenericRXTL-LJ!6F3A8E40984D
MalwarebytesTrojan.Downloader
VIPRETrojan.Ransom.Poison.B
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0059befd1 )
BitDefenderTrojan.Ransom.Poison.B
K7GWTrojan ( 0059befd1 )
Cybereasonmalicious.ec6c8b
BitDefenderThetaGen:NN.ZevbaF.36792.amW@aKovO2i
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.CQD
APEXMalicious
KasperskyHEUR:P2P-Worm.Win32.Convagent.gen
NANO-AntivirusTrojan.Win32.VB.juiskq
RisingTrojan.Generic@AI.100 (RDML:VQyQM+R5bPm1k51yScMvvA)
SophosMal/ExeSax-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.PackedENT.124
Trapminemalicious.high.ml.score
EmsisoftTrojan.Ransom.Poison.B (B)
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=89)
JiangminTrojan/Generic.bghcg
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
VaristW32/Cerbu.BW.gen!Eldorado
Antiy-AVLGrayWare/Win32.Krap.cku
Kingsoftmalware.kb.a.998
MicrosoftTrojan:Win64/Grandoreiro.psyE!MTB
XcitiumHeur.Packed.MultiPacked@1z141z3
ArcabitTrojan.Ransom.Poison.B
ZoneAlarmHEUR:P2P-Worm.Win32.Convagent.gen
GDataTrojan.Ransom.Poison.B
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.LJ.R535457
Acronissuspicious
VBA32Malware-Cryptor.General.3
ALYacTrojan.Ransom.Poison.B
DeepInstinctMALICIOUS
Cylanceunsafe
TencentTrojan.Win32.VB.xhae
IkarusVirus.Win32.VB.FEW
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.C40A!tr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment