Should I remove “Win64/Agent.APG”?

The Win64/Agent.APG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Agent.APG virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win64/Agent.APG?


File Info:
crc32: 577BE51E
md5: 85615f0655d19c812aed705f2df7b165
name: 85615F0655D19C812AED705F2DF7B165.mlw
sha1: 4df0c8b1b3e6399a746afe130a042f5ba6d6f19f
sha256: db3694833832a5676de0073a703f752f05dfbad293cea1325777ed8b99220589
sha512: 9fab66776bfd133b563435ad6c26216e90084b8a8feb2997d553d4cd2c8bc5f73eb7219bfb28763c5084f9f6fb1dd0d7dda05dcbedbf6c50919c63dacf468087
ssdeep: 12288:0eJxdEw2LX0AWcVlLSTHpT8O7Sa/X0cFyOprBfAdokiboVscP9YbUrJykkkkkkkH:NJXEZLEMVlIpTpZPyOpCPf9YbUrJcA
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/Agent.APG also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.Cobaltstrike
ALYac	Trojan.GenericKD.46383449
Cylance	Unsafe
Sangfor	Trojan.Win32.CobaltStrike.gen
Alibaba	Trojan:Win64/CobaltStrike.376de364
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1b3e63
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Agent.APG
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.CobaltStrike.gen
BitDefender	Trojan.GenericKD.46383449
MicroWorld-eScan	Trojan.GenericKD.46383449
Ad-Aware	Trojan.GenericKD.46383449
Sophos	Mal/Generic-R + Mal/BadCert-Gen
TrendMicro	Backdoor.Win64.COBEACON.OSLJAM
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.85615f0655d19c81
Emsisoft	MalCert-S.KQ (A)
Avira	TR/Redcap.nqxhr
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	VirTool:Win32/Sysdupate.gen!B
AegisLab	Trojan.Win32.CobaltStrike.4!c
GData	Trojan.GenericKD.46383449
McAfee	Artemis!85615F0655D1
MAX	malware (ai score=82)
VBA32	Trojan.CobaltStrike
Panda	Trj/CI.A
TrendMicro-HouseCall	Backdoor.Win64.COBEACON.OSLJAM
Rising	Trojan.CobaltStrike!8.EDF2 (CLOUD)
Ikarus	Trojan.Win64.Agent
MaxSecure	Trojan.Malware.73412758.susgen
Fortinet	W32/CobaltStrike.OSLJAM!tr
AVG	FileRepMalware

How to remove Win64/Agent.APG?

Win64/Agent.APG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X