Win32/Agent_AGen.DDZ malicious file

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: 2FAFBBE4B52FDCEE9320.mlw
path: /opt/CAPEv2/storage/binaries/a21419694f6ee3a9edc6cb9fad7727a4759691e366c1de09bbce13f21a40a537
crc32: 5363E39B
md5: 2fafbbe4b52fdcee93205b36edf581b5
sha1: 03f7eb04492d125b2be5a094f03c43984cbbbc58
sha256: a21419694f6ee3a9edc6cb9fad7727a4759691e366c1de09bbce13f21a40a537
sha512: c576f7795f35591b3dbcc005eab0b016732d886852813c14189029ad251badb7811638ec47b7e63fcf5999d10ae7b0832ed40aa0a3b34462830cef7797eec98a
ssdeep: 768:mSC54KP2ySt0gm07PP3lLuzZPKqgZZwTGek8eoR5:jC54W1STx7PP3lLuBZgZZw6ek8D
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T150E2D8697E444CEBE950173D80E7CB762A7CF050C6234B62F650A7349A237E621DB26F
sha3_384: 7d3a8656d7dd1b98ab04425e0f0e77628d7ac8e491cf9a948ae99fb5126c0dc8c178023e06a7fa8f01279efa33481609
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 01:16:43

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.71603857
FireEye	Generic.mg.2fafbbe4b52fdcee
Skyhigh	BehavesLike.Win32.BadFile.nm
McAfee	GenericRXWN-OT!2FAFBBE4B52F
VIPRE	Trojan.GenericKD.71603857
Sangfor	Trojan.Win32.Agent.Vej0
Alibaba	Trojan:Win32/Generic.6f38fe94
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aKj3Phj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
BitDefender	Trojan.GenericKD.71603857
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Dropper.Eflw
Emsisoft	Trojan.GenericKD.71603857 (B)
F-Secure	Trojan.TR/Dropper.Gen
Sophos	Mal/Generic-S
GData	Win32.Trojan.Agent.JDCRBN
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Generic.D4449691
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R634466
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (CLOUD)
Fortinet	W32/Agent.DDP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X