Win32/Agent_AGen.DDZ removal tips

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: 49378D24C6F84EE563E8.mlw
path: /opt/CAPEv2/storage/binaries/92bc8734b82196d922d8ebab432322da16fa647c0fcaf2daa005f0cf2e92e05e
crc32: 7C81302A
md5: 49378d24c6f84ee563e8dd8bd79b5499
sha1: 8bb2a1806435131cdc02b44a30a7ac46df2bb355
sha256: 92bc8734b82196d922d8ebab432322da16fa647c0fcaf2daa005f0cf2e92e05e
sha512: 8b43df0874c2a5cfac1770e386ac3c0729b7a972609d034641cda9a01bb7a9d72c9cff72d7e280904749eec5b23325872e53b7d3841962886b01442530c420f7
ssdeep: 384:pMsy6/nfSdwy0OClCvE0+mPeuaBU3losjuzZ6UwYRGZqY7P1rKngZYNDcHu5xRG:is1/f0AO0R0PP3lLuzZPKqwVKFYHmxRG
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T155E2C5597E444CEBDA51173891E6C77A2A7CF190C6234F63FA60B7308A33B95608B17E
sha3_384: 38c762fdee9eb5bd34df556c1b802ebb5f836ca559bdbc4d2bd9473ddb7b874bb2fb176a51bb6d75270f0f59a018c247
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 04:23:15

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.PT.c46@auUBepg
VIPRE	Gen:Trojan.Heur.PT.c46@auUBepg
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 100)
BitDefender	Gen:Trojan.Heur.PT.c46@auUBepg
Emsisoft	Gen:Trojan.Heur.PT.c46@auUBepg (B)
FireEye	Generic.mg.49378d24c6f84ee5
GData	Gen:Trojan.Heur.PT.c46@auUBepg
MAX	malware (ai score=85)
Arcabit	Trojan.Heur.PT.E6C20C
Microsoft	Trojan:Win32/Wacatac.B!ml
BitDefenderTheta	AI:Packer.F4F934EE1E
ALYac	Gen:Trojan.Heur.PT.c46@auUBepg

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X