Win32/Agent_AGen.CZP removal tips

The Win32/Agent_AGen.CZP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CZP virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CZP?


File Info:
name: 6D115B24A2592F08C7E5.mlw
path: /opt/CAPEv2/storage/binaries/fca2e8184a14e047c2837c4cf5237c8d4401587275dc2fc3d0a1be05c5213a6e
crc32: 6BE850F6
md5: 6d115b24a2592f08c7e5ff27dd2e4680
sha1: 5f6c1b4268f2bbe11aec25092f7bc972a7b943a2
sha256: fca2e8184a14e047c2837c4cf5237c8d4401587275dc2fc3d0a1be05c5213a6e
sha512: 5b2d11474887e4179639be6934dbd9a05e77738e422768fea26b83073237402c0d41bb9372c3c2053de987b040e1587bfa0b2a40e44c6ed92b3925d33a28d5ee
ssdeep: 768:nMKkZE21/hh6BxBEpZSEJ1zPP3lLuzZPKq+378Na6BBZ2G9YmctgkRE:Mf/MHEpZBpPP3lLuBZ+LH67ZP9Ymcts
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T128231955BE698CEBE651633E84EBC37B577CF1808B231B53B734BA305B437922094646
sha3_384: 922ea7f29a97ab37c91780cfe09d75c725ddfb751a7fc0622d732f7f4f36107c7f7a11759ce87f8c815477867614f63c
ep_bytes: 83ec1cc7042401000000ff155c924000
timestamp: 2023-12-22 17:14:20

Version Info:
0: [No Data]

Win32/Agent_AGen.CZP also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Shellex.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.531572
Skyhigh	BehavesLike.Win32.Injector.pm
ALYac	Gen:Variant.Zusy.531572
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CZP
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/WhisperGate.57f5d5cc
Tencent	Trojan.Win32.Agent.hel
Sophos	Troj/Inject-JGZ
Ikarus	Trojan.Win32.Agent
Jiangmin	Trojan.Generic.bjgvg
Antiy-AVL	Trojan/Win32.WhisperGate
Kingsoft	malware.kb.a.929
ZoneAlarm	HEUR:Trojan.Win32.Shellex.gen
AhnLab-V3	Trojan/Win.Generic.R629844
VBA32	Trojan.Convagent
Malwarebytes	Trojan.Injector
Rising	Trojan.Agent!8.B1E (TFE:5:UDmjbuOqq7C)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.CZK!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CZP?

Win32/Agent_AGen.CZP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X