How to remove “Win32/Agent_AGen.CQD”?

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: 1F33A0EA398C0461B193.mlw
path: /opt/CAPEv2/storage/binaries/38193c8b23a93d720d274779585fb80971477d5b42ad177fcfd977fde3984afb
crc32: B4252ACA
md5: 1f33a0ea398c0461b193fcdf2fa65057
sha1: 414761dfb4919f277449003ae33a788960cc7bda
sha256: 38193c8b23a93d720d274779585fb80971477d5b42ad177fcfd977fde3984afb
sha512: 57321833972338665285692fd007c8eb39d97fc09eb64afff02a38a8e150903a5b9df8d8f8822c03247536a0924d5fcec9348a5476c987ab4473ddae44cf2afc
ssdeep: 384:HXdtqHaN4TvtnnnnnnnnnnnnnZra/kMCDE045H0mmmm:HXqaIxAKmmmm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19D035DE14AAE64B0FBDC42FF2B2F139B86F9741B3D664729530B81078E644E4853459F
sha3_384: ae2fa52e48335fac79632ba73f49a313e82da7ceb653291975498d3996c1070ba1a3b480aff9c65a13cb545f775a2278
ep_bytes: deee56e7a01b946e07f118174538f67f
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.465768
Skyhigh	BehavesLike.Win32.Generic.pz
ALYac	Gen:Variant.Zusy.465768
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.465768
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.465768
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.fb4919
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:KbbX94OOKTF2V77lXJx+Ng)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.1f33a0ea398c0461
Emsisoft	Gen:Variant.Zusy.465768 (B)
Ikarus	Trojan.Patched
Google	Detected
Avira	TR/Patched.Ren.Gen
Varist	W32/S-9bdefeb6!Eldorado
Kingsoft	malware.kb.a.1000
Microsoft	PWS:Win32/Zbot!ml
Arcabit	Trojan.Zusy.D71B68
GData	Gen:Variant.Zusy.465768
Cynet	Malicious (score: 100)
Acronis	suspicious
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJV23
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X