Win32/Agent_AGen.DDZ removal instruction

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: 987C13EA3262B513174F.mlw
path: /opt/CAPEv2/storage/binaries/2521856239647328cb24a539dcbae3b7618f1de40c97195319c84627197f1ba0
crc32: B8A6AB8A
md5: 987c13ea3262b513174f50e8c671f382
sha1: 6aeb35bbee6dfb5af82c03ea0da502f669ea4e3c
sha256: 2521856239647328cb24a539dcbae3b7618f1de40c97195319c84627197f1ba0
sha512: 984ca1a9fee9fea68437e364cdca5fa541ad67ee5818824f058976358505a10dd2652f0f6ce012784a9fed92737e7203a4afd2f00a591ba9316f953525757db9
ssdeep: 768:rna9nQOOGt01PP3lLuzZPKqQwG8G6kJbxRm:ja9ROGyPP3lLuBZQwk6kJS
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A4E2E8597E444CEBD960173D80E7CB762A7DF185C6234FA2F650A7308B23766208B36E
sha3_384: e7448019e1bc081e51e38f36c94ed010e12bfe3e654bdb4aebb13c6213c99beeef9f56e36f65eec9bae6737374547d61
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 08:36:51

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

Elastic	malicious (moderate confidence)
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OO!987C13EA3262
Sangfor	Trojan.Win32.Agent.V4at
Alibaba	Trojan:Win32/Generic.2870f28c
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@a8crukg
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 99)
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Dropper.Htgl
F-Secure	Trojan.TR/Dropper.Gen
Sophos	Mal/Generic-S
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634466
Cylance	unsafe
Rising	Trojan.Agent!8.B1E (TFE:5:kR4jRlme8hV)
Fortinet	W32/Agent.DDP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X