Should I remove “Trojan.Win32.Agent.xabxmr”?

The Trojan.Win32.Agent.xabxmr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Agent.xabxmr virus can do?

• Executable code extraction
• Presents an Authenticode digital signature
• Creates RWX memory
• Drops a binary and executes it
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Installs itself for autorun at Windows startup
• Checks the CPU name from registry, possibly for anti-virtualization
• Creates a copy of itself

Related domains:

How to determine Trojan.Win32.Agent.xabxmr?

File Info:
crc32: 209D177F
md5: 8da78e0f5f66a579b7e7aea33f53d41b
name: SQLSernsf.exe
sha1: bd5735d864ad526064b7a9dc01a05f749f86fd69
sha256: d90a59216fb991d99437d6524063eb24be8030ee07a301223655f809139a9db3
sha512: 8c1430adcb9148235721617a07717ad8e2f825df66d30cf32e2fbb609ffdac90ee3656064391a490e2b8f6aa1c0e09a96add5b76176195ebd556826f92d2fc44
ssdeep: 6144:4v5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:44VOiF1WD7kE1dTYOi8V5u23zmWFy4
type: MS-DOS executable, MZ for MS-DOS

Version Info:
LegalCopyright: (C) 360.cn All Rights Reserved.
InternalName: LSPFix
FileVersion: 7, 1, 3, 1057
CompanyName: 360.cn
ProductName: 360x5b89x5168x536bx58eb
ProductVersion: 7, 1, 3, 1057
FileDescription: 360x5b89x5168x536bx58eb LSPx4feex590dx6a21x5757
OriginalFilename: LSPFix.EXE
Translation: 0x0804 0x04b0

Trojan.Win32.Agent.xabxmr also known as:

How to remove Trojan.Win32.Agent.xabxmr?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.