How to remove “Win32/Agent_AGen.DDZ”?

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: 08058465A24BBDC8F7B8.mlw
path: /opt/CAPEv2/storage/binaries/5ead3c553916441b9dd2cbfaef39377a4ab0f1c11707f2fea63a6288d9a494e4
crc32: 6E57842A
md5: 08058465a24bbdc8f7b8a266867a84dd
sha1: 7f833d2559a8bf1f37ca89c40216b5d49bb03803
sha256: 5ead3c553916441b9dd2cbfaef39377a4ab0f1c11707f2fea63a6288d9a494e4
sha512: e559100e02c2a6f5afcbb409960c2304135182f9ff7d67c92dadc9f494201021bb057196f247da4dd0111de77de7269361a9fa3ea1816fd984455ae1695fc266
ssdeep: 384:IJMuxeV6M9sZwlkkJAmPeuaBU3losjuzZ6UwYRGZqM7POcINIDkRHLoRC:F29Z2koPP3lLuzZPKqESIgRroRC
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1B4E2B7997E444CE7E550573980EBC77A2A7CF081C6234BA2F650A7309F637A1319B26F
sha3_384: c2bdaec9eb3ed14f8f909900384fd31844a6091cdbbbf700b6a432da6c990c6bfcf529a70dfdc1401a96cbe07864eec0
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 05:49:54

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

MicroWorld-eScan	Trojan.GenericKD.71610321
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OS!08058465A24B
Alibaba	Trojan:Win32/Fsysna.d3ac3345
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Kaspersky	Trojan.Win32.Fsysna.jfxc
BitDefender	Trojan.GenericKD.71610321
Avast	FileRepMalware [Misc]
Tencent	Win32.Trojan.Fsysna.Jajl
Emsisoft	Trojan.GenericKD.71610321 (B)
VIPRE	Trojan.GenericKD.71610321
FireEye	Trojan.GenericKD.71610321
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.71610321
Google	Detected
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Fsysna
Arcabit	Trojan.Generic.D444AFD1
ZoneAlarm	Trojan.Win32.Fsysna.jfxc
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.Generic.R634603
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@a4vbRok
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.Win32.Agent
AVG	FileRepMalware [Misc]

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X