Win32/Agent_AGen.CZP removal

The Win32/Agent_AGen.CZP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.CZP virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.CZP?


File Info:
name: 3817243279FDC56B0D51.mlw
path: /opt/CAPEv2/storage/binaries/419a2e2020e526aa8d2caa91ff1783e8abef8bec68146a633a8bea6b8fa6d8f4
crc32: C83F1ECE
md5: 3817243279fdc56b0d51e18447133912
sha1: b1039eda725bb4f9b4216cf466ae68d315681da4
sha256: 419a2e2020e526aa8d2caa91ff1783e8abef8bec68146a633a8bea6b8fa6d8f4
sha512: ee7f5b05f39e22e142875f772806256abdb24a349224343900d026be1f59bc6e058f571dd350a128b18605efbdb99e8e3440410469db6e10915f8f569db1645c
ssdeep: 768:crV5Eo+vIgfSlhawUta45XPP3lLuzZPKqH7BeGkkxGG802zgLRm:seIwo/UFBPP3lLuBZH7gGkkIG802zT
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T178230955BE658CEBE652633E80EBC77B5B7CF5818B230B53B734FA305B036922094246
sha3_384: 8f156e1505260c43d1d98c98a64b82e2e857ac36f017412271bc8cc8adf6e51c158b1904326088a2c0e6fe64e16cd3bc
ep_bytes: 83ec1cc7042401000000ff152c924000
timestamp: 2023-12-22 19:24:26

Version Info:
0: [No Data]

Win32/Agent_AGen.CZP also known as:

Bkav	W32.Common.A0CD17F4
Lionic	Trojan.Win32.Dacic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Dacic.1206.1D4ACB7A
FireEye	Generic.mg.3817243279fdc56b
ALYac	Generic.Dacic.1206.1D4ACB7A
Cylance	unsafe
K7AntiVirus	Trojan ( 005b11261 )
K7GW	Trojan ( 005b11261 )
BitDefenderTheta	Gen:NN.ZexaF.36744.c0Y@a0EO1hk
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.CZP
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/WhisperGate.287851eb
DrWeb	BACKDOOR.Trojan
TrendMicro	TROJ_GEN.R002C0DAJ24
Sophos	Troj/Inject-JGZ
Ikarus	Trojan.Win32.Agent
Avira	TR/Agent_AGen.yrnxs
Antiy-AVL	Trojan/Win32.Convagent
Arcabit	Generic.Dacic.1206.1D4ACB7A
Google	Detected
AhnLab-V3	Trojan/Win.TrojanX-gen.R629841
MAX	malware (ai score=89)
Malwarebytes	Trojan.Injector
TrendMicro-HouseCall	TROJ_GEN.R002C0DAJ24
Tencent	Trojan.Win32.Agent.hel
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.CZK!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Agent_AGen.CZP?

Win32/Agent_AGen.CZP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X