Malware

How to remove “Win32/Agent_AGen.DDG”?

Malware Removal

The Win32/Agent_AGen.DDG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent_AGen.DDG virus can do?

  • Sample contains Overlay data
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/Agent_AGen.DDG?


File Info:

name: 3E8D169D7ECACD406960.mlw
path: /opt/CAPEv2/storage/binaries/7419a1bd33e4ada314fbb9b5c806d5179d69fd1e23751c897538237a03e59405
crc32: 8318515A
md5: 3e8d169d7ecacd406960a5a0eef7c2a9
sha1: d13fd4c91ed0fa0a4d7ee9c0c88509c5422de0fd
sha256: 7419a1bd33e4ada314fbb9b5c806d5179d69fd1e23751c897538237a03e59405
sha512: 8b74079e3bccf8ed2231e7ab83c4db7e9d00fe77ce9c708d5560bd29f7e25d7d3f7f09afd19673ca3f6a9e571e17e5d23f6a72e0c18cffe436ed3acc9458dd1a
ssdeep: 3072:0VnvbLd9PRBQ5dmx3dtO0cPlDJBFb1z9OwylMfi7D3q:G3RBQ5d1rPpTFbXrylei7W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12F140697621030F9E6F68E39D6396A58A7307AD10B71CC53438AF57D162BB34EF606B0
sha3_384: 88f0e09bbcc5beb74fec81f454f83867de6fb52fe26ea8326009f22a94a72488465ff01373e464bda7256bf97a9f860f
ep_bytes: 07341d234a3036530e1362050662030c
timestamp: 1970-01-01 00:02:03

Version Info:

0: [No Data]

Win32/Agent_AGen.DDG also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Razy.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.854482
SkyhighBehavesLike.Win32.VirRansom.dc
McAfeeGenericRXVW-RW!3E8D169D7ECA
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Razy.854482
SangforSuspicious.Win32.Save.a
K7AntiVirusRiskware ( 00584baa1 )
AlibabaRansom:Win32/ContiCrypt.1a30aba3
K7GWRiskware ( 00584baa1 )
Cybereasonmalicious.d7ecac
BitDefenderThetaGen:NN.ZexaF.36802.miY@aeQDnTo
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Agent_AGen.DDG
APEXMalicious
ClamAVWin.Virus.Virlock-6913184-0
BitDefenderGen:Variant.Razy.854482
NANO-AntivirusTrojan.Win32.Razy.jwpnhn
AvastSf:VirLock-A
TencentTrojan.Win32.Sdum.kh
EmsisoftGen:Variant.Razy.854482 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.3e8d169d7ecacd40
SophosMal/Generic-S
IkarusVirus.Win32.Nabucur
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/S-4d49291c!Eldorado
MicrosoftRansom:Win32/ContiCrypt.LOD!MTB
XcitiumPacked.Win32.Graybird.B@5hgpd5
ArcabitTrojan.Razy.DD09D2
GDataGen:Variant.Razy.854482
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.C638970
Acronissuspicious
ALYacGen:Variant.Razy.854482
MAXmalware (ai score=89)
Cylanceunsafe
PandaTrj/CI.A
RisingTrojan.SmokeLoader!1.E638 (CLASSIC)
YandexVirus.Virlock.Gen.AAJ
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.186363340.susgen
FortinetW32/Virlock.K
AVGSf:VirLock-A
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudMalware

How to remove Win32/Agent_AGen.DDG?

Win32/Agent_AGen.DDG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment