Win32/Agent_AGen.CQD removal guide

The Win32/Agent_AGen.CQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CQD virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CQD?


File Info:
name: FA9BC6C35C98B71170C9.mlw
path: /opt/CAPEv2/storage/binaries/0074bad3f3aebd11843d15b39d93a033e63ae50ae404eb8781f20770f0f28022
crc32: 489E6DBF
md5: fa9bc6c35c98b71170c9956a0661d399
sha1: c24655c515b31132b7f059edf228240b5e835784
sha256: 0074bad3f3aebd11843d15b39d93a033e63ae50ae404eb8781f20770f0f28022
sha512: c54e8597119384f25d083d82ce8661b72bbdf087f34a88c3f098f082d91905ebe647cdecb1bc1fee470f84f9c8027560c66368bd96b1e260b4bf25981c9dd17a
ssdeep: 384:8Vnas2ExTC0p4f7etBQqdIYdoIlmyDE045HEqqqq:8VfzC0p4f+SiIYdogmoA+qqqq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C5038D67158C81F2FF8D0AF74B3B898154A8B1905F49BA48C419DAD55F3EA272B33207
sha3_384: 6a710a5c8dc42ba466b8d7e07925972f28a6b8a4562328ccc5f3a0a6c82b15ee0b5bd6c927f91d43158898c20e8d5e57
ep_bytes: bc832026d2c8f3993abfbd26e5252ed4
timestamp: 2007-07-24 01:52:49

Version Info:
0: [No Data]

Win32/Agent_AGen.CQD also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.465768
Skyhigh	BehavesLike.Win32.Generic.pz
McAfee	Artemis!FA9BC6C35C98
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Gen:Variant.Zusy.465768
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.465768
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.515b31
BitDefenderTheta	Gen:NN.ZexaE.36792.cmY@aihbphl
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.CQD
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:+2grmXCqduKE1Bz7X6Qxjw)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.fa9bc6c35c98b711
Emsisoft	Gen:Variant.Zusy.465768 (B)
Ikarus	Trojan.Patched
Google	Detected
Avira	TR/Patched.Ren.Gen
Varist	W32/S-9bdefeb6!Eldorado
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
Arcabit	Trojan.Zusy.D71B68
GData	Gen:Variant.Zusy.465768
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Zusy.465768
MAX	malware (ai score=80)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJT23
Tencent	Trojan.Win32.Patched.kd
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C40A!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CQD?

Win32/Agent_AGen.CQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X