Malware

Should I remove “Troj/Xtbl-EL”?

Malware Removal

The Troj/Xtbl-EL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Troj/Xtbl-EL virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Troj/Xtbl-EL?


File Info:

crc32: A78E6578
md5: e697d27432d8b3b691328b765c8bf9e3
name: 2c.jpg
sha1: b631af4bc744a902a88adacb9d9361c9318dbeb9
sha256: 2e88e60123f0d285a09e079326d295dc28cac76e222a3f3ad96038b31ca1ea59
sha512: bcba531de5106b0b6b8418dc822fc51253aab1e89647e9095c6beb3f440298e3e2c972404b505020c6248ba10cdb6943c48257a013ed30b2ac9b3eb059c5ba0b
ssdeep: 24576:ybcVJyJj7zIBP8yvs1u0jdQhgFqQfWilKpF8:DYjo5Xv0Y/QtkH8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Xabitozecesaji. Pezamuhawumeb dayihariduca. Pobotiyayuta wicavakepiyepe femotofuv
InternalName: binokubino.exe
FileVersion: 28.0.0.45
Translation: 0x0409 0x04e4

Troj/Xtbl-EL also known as:

DrWebTrojan.PWS.Stealer.27387
MicroWorld-eScanTrojan.GenericKD.41999588
FireEyeGeneric.mg.e697d27432d8b3b6
ALYacTrojan.Ransom.Shade
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0055b2c51 )
BitDefenderTrojan.GenericKD.41999588
K7GWTrojan ( 0055b2c51 )
Cybereasonmalicious.bc744a
TrendMicroTROJ_GEN.R049C0DKA19
BitDefenderThetaGen:NN.ZexaF.32250.8u0@aiyt5Pi
SymantecPacked.Generic.525
APEXMalicious
GDataTrojan.GenericKD.41999588
KasperskyTrojan.Win32.Agent.xaccwc
AlibabaTrojan:Win32/Agent.8f50f4e9
AegisLabTrojan.Win32.Generic.4!c
RisingTrojan.Generic@ML.87 (RDMK:XoxBo+J1MKNq5oYmRauNCA)
Endgamemalicious (high confidence)
SophosTroj/Xtbl-EL
F-SecureTrojan.TR/Crypt.XPACK.pjjmq
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.dc
IkarusTrojan.Win32.Crypt
CyrenW32/Trojan.MYTO-4246
JiangminTrojan.Generic.ehkzc
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.pjjmq
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Agent
MicrosoftTrojan:Win32/Injector.PA!MTB
ArcabitTrojan.Generic.D280DCE4
ZoneAlarmTrojan.Win32.Agent.xaccwc
AhnLab-V3Malware/Win32.RL_Generic.R298382
Acronissuspicious
McAfeeRDN/Generic PWS.y
VBA32BScope.Trojan.Dynamer
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.GYDK
TrendMicro-HouseCallTROJ_GEN.R049C0DKA19
SentinelOneDFI – Suspicious PE
FortinetW32/GenKryptik.DXGL!tr
Ad-AwareTrojan.GenericKD.41999588
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM10.2.1713.Malware.Gen

How to remove Troj/Xtbl-EL?

Troj/Xtbl-EL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment