Trojan

Should I remove “Trojan.Agent.IBXK.Generic”?

Malware Removal

The Trojan.Agent.IBXK.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.IBXK.Generic virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.Agent.IBXK.Generic?


File Info:

crc32: 61B7DFF9
md5: a1889efd3eb711b16ca773675c5418a2
name: vpn.exe
sha1: de25b6832b6c5ce07170ca4fbc1190ee33a96995
sha256: d48c0ea2b9d5f4fe78d8e1493bc66dd327ec12f9fe9d4c7df3dcc7b864a11a20
sha512: 60e14f1a4d4205912887e9a5f0c08de5d8601bc94e41d5cc6d5df772d238e62950ebddbeb29a4b8d6269d8f8f133f404def52ce40539fd450d9c9ad955a5e25f
ssdeep: 49152:ZVg5tQ7azFuFh5GK6GoGFzeVMxso8weDQ5y:ng566uYK6gzaOT8wel
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan.Agent.IBXK.Generic also known as:

MicroWorld-eScanTrojan.GenericKD.33543472
FireEyeTrojan.GenericKD.33543472
Qihoo-360Win32/Trojan.PSW.f8f
McAfeeArtemis!A1889EFD3EB7
CylanceUnsafe
K7AntiVirusTrojan ( 005626af1 )
BitDefenderTrojan.GenericKD.33543472
K7GWTrojan ( 005626af1 )
TrendMicroTrojanSpy.AutoIt.NEGASTEAL.SM.hp
SymantecPacked.Generic.548
APEXMalicious
AvastScript:SNH-gen [Trj]
GDataTrojan.GenericKD.33543472
KasperskyTrojan-PSW.Win32.Racealer.dxc
AlibabaTrojanPSW:Win32/Racealer.138701a4
ViRobotTrojan.Win32.Z.Hawkeye.2152000
AegisLabTrojan.Win32.Generic.mcXT
RisingTrojan.Obfus/Autoit!1.C3D3 (CLASSIC)
Ad-AwareTrojan.GenericKD.33543472
EmsisoftTrojan.GenericKD.33543472 (B)
F-SecureTrojan.TR/Autoit.onklm
DrWebTrojan.Siggen9.20951
McAfee-GW-EditionTrojan-AitInject.aq
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan-Spy.HawkEye
CyrenW32/Trojan.YVBW-0847
AviraTR/Autoit.onklm
Antiy-AVLTrojan/Generic.ASCommon.1B8
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1FFD530
ZoneAlarmTrojan-PSW.Win32.Racealer.dxc
MicrosoftTrojan:Win32/Tiggre!rfn
AhnLab-V3Win-Trojan/AutoInj.Exp
ALYacTrojan.GenericKD.33543472
MAXmalware (ai score=99)
MalwarebytesTrojan.Agent.IBXK.Generic
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.Autoit.FDU
TrendMicro-HouseCallTrojanSpy.AutoIt.NEGASTEAL.SM.hp
TencentWin32.Trojan-qqpass.Qqrob.Lkxc
eGambitUnsafe.AI_Score_94%
FortinetAutoIt/Injector.FDH!tr
AVGScript:SNH-gen [Trj]
Paloaltogeneric.ml
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Agent.IBXK.Generic?

Trojan.Agent.IBXK.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment