How to remove “Win32/Agent_AGen.DDP”?

The Win32/Agent_AGen.DDP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDP virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDP?


File Info:
name: F5910E9AB787390CD2B3.mlw
path: /opt/CAPEv2/storage/binaries/857535f234c62d8fbd1281be00d4f833ce1ecbcd4dde79ff02616b4c194344d8
crc32: D9B2D29E
md5: f5910e9ab787390cd2b3e88827e8774a
sha1: 189cf83f22525f24a05930f3aeb5b57694f0cb55
sha256: 857535f234c62d8fbd1281be00d4f833ce1ecbcd4dde79ff02616b4c194344d8
sha512: 039d1fcac985d008210bf946a4f87f14bf70c631fd2dc1b0ae9fb6587a883f54a318a66a650677fc8879ab327413433a282c7753f96160615806056ade65e5f6
ssdeep: 384:cGVqFSqJa+0fQd/ViCZAlmkWGomPeuaBU3losjuzZ6UwYRGZq47PXx4R5NVDk/RM:cnF30aZGm8PP3lLuzZPKqQ+Vg/9oRZ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1BEE2C6997E444CEBE950173994F7D77A2A7CF181CA234B62F654A7304B337A1608B22F
sha3_384: 69f1b963ea9ff884e12fe0adf756a96a50c91cdc869960c5b2928ea9680a345d3f378f810dfdbdebc1d2ff9685a02a7d
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-08 23:51:34

Version Info:
0: [No Data]

Win32/Agent_AGen.DDP also known as:

MicroWorld-eScan	Trojan.GenericKD.71608462
FireEye	Trojan.GenericKD.71608462
Skyhigh	BehavesLike.Win32.BadFile.nm
McAfee	GenericRXWN-OT!F5910E9AB787
Sangfor	Trojan.Win32.Agent.Vl28
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Generic.1e164cff
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@a8LBrbd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDP
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.Agent.xbkpio
BitDefender	Trojan.GenericKD.71608462
Avast	FileRepMalware [Trj]
Emsisoft	Trojan.GenericKD.71608462 (B)
F-Secure	Trojan.TR/Agent_AGen.nhqer
VIPRE	Trojan.GenericKD.71608462
Sophos	Mal/Generic-S
GData	Win32.Trojan.PSE.1BXSM3T
Google	Detected
Avira	TR/Agent_AGen.nhqer
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Generic.D444A88E
ZoneAlarm	Trojan.Win32.Agent.xbkpio
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634646
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (TFE:5:XBqMyjv3DlD)
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent.DDP!tr
AVG	FileRepMalware [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.DDP?

Win32/Agent_AGen.DDP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X