Should I remove “Win32/Agent_AGen.DDZ”?

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: E2C4EDA75478B18B23BF.mlw
path: /opt/CAPEv2/storage/binaries/aff4c4754ef59e4288755b5a3411f58246b0d6dfa8436973b637abea853a7ca7
crc32: 3FCF227B
md5: e2c4eda75478b18b23bf362a92764b35
sha1: c2d01f1a3019d16513901e8a5b8085036085dbc1
sha256: aff4c4754ef59e4288755b5a3411f58246b0d6dfa8436973b637abea853a7ca7
sha512: 6e87eef7fdf5ea8e229ca6de5dfd3e3ac39f96fc5d810527b83378c9c18ccdac96508637ae5447bb87a7462a8630fe48c02de4b2efe185162444ffd7233eb126
ssdeep: 768:qAnctm01ArPP3lLuzZPKqa7FvBY8Gec8pxRi:qcQ5ArPP3lLuBZa75oec8U
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T16FE2B6697E444CE7EA51173890E6CB7A367CF091C6634F62F660F7308A23BA1605B16E
sha3_384: 0b77bd2a7104017dfd72c82a2684d66dc7692f65cad5a979a255892299824329e25c662fe6434ac0c586821ac816c293
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 07:30:12

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Trojan.Heur.PT.c46@aaejpQo
FireEye	Generic.mg.e2c4eda75478b18b
Skyhigh	Artemis!Trojan
McAfee	Artemis!E2C4EDA75478
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vfhd
Alibaba	Trojan:Win32/Generic.08494e5d
BitDefenderTheta	AI:Packer.30B0B77E1E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 100)
BitDefender	Gen:Trojan.Heur.PT.c46@aaejpQo
Tencent	Win32.Trojan.Dropper.Wimw
Emsisoft	Gen:Trojan.Heur.PT.c46@aaejpQo (B)
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Gen:Trojan.Heur.PT.c46@aaejpQo
Sophos	Mal/Generic-S
Avira	TR/Dropper.Gen
Arcabit	Trojan.Heur.PT.EDAF66
ZoneAlarm	UDS:Trojan-Dropper.Win32.Agent
ALYac	Gen:Trojan.Heur.PT.c46@aaejpQo
MAX	malware (ai score=85)
DeepInstinct	MALICIOUS
Rising	Trojan.Agent!8.B1E (TFE:5:Ij8WZCPCW2S)

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X