Trojan

Trojan.Win32.Agent.xaeleq removal guide

Malware Removal

The Trojan.Win32.Agent.xaeleq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Agent.xaeleq virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xaeleq?


File Info:

crc32: A296B5D4
md5: fd9efb034dc6b0363be2ad2f7f98ae47
name: upload_file
sha1: a5900d6628c0239979886577ae2458e7049f736f
sha256: 0221a0e77a374582b84c6df13c131a0f04716a00951dc3f6a483d3f612da882f
sha512: 43c08f8a9450b750cf8260f4030b58546eba2b74c9be28ba511b5eefeb416a40f73b5953ba6951ccceab832a9e52ca71c6686624cc5f1a8bcee4920f47f4128e
ssdeep: 12288:XacE/pkfe3EWywOiYEHxwIPvwacE6h+e8:qc2q5IPjcJt8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: Tsukishima Monja Kkoboreya
FileVersion: 1.00
CompanyName: Hawaiian Style
ProductName: Tsukishima Monja Kkoboreya
ProductVersion: 1.00
FileDescription: AGBO Business Architecture S.L.
OriginalFilename: Tsukishima Monja Kkoboreya.exe

Trojan.Win32.Agent.xaeleq also known as:

Elasticmalicious (high confidence)
DrWebTrojan.DownLoader34.51666
FireEyeGeneric.mg.fd9efb034dc6b036
McAfeeGenericRXAA-AA!FD9EFB034DC6
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0056f84b1 )
BitDefenderTrojan.GenericKD.43896101
K7GWTrojan ( 0056f84b1 )
InvinceaMal/Generic-S
BitDefenderThetaGen:NN.ZevbaF.34254.Hm0@a8B4VEdk
CyrenW32/VBKrypt.AOJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Agent.xaeleq
AlibabaTrojan:Win32/EmotetCrypt.92bcbc6f
MicroWorld-eScanTrojan.GenericKD.43896101
RisingTrojan.Kryptik!1.C606 (CLASSIC)
Ad-AwareTrojan.GenericKD.43896101
EmsisoftTrojan.GenericKD.43896101 (B)
ComodoMalware@#20glaozun2a74
F-SecureTrojan.TR/Kryptik.ilnlg
McAfee-GW-EditionBehavesLike.Win32.Trojan.hh
SophosMal/Generic-S
IkarusTrojan-Banker.Emotet
AviraTR/Kryptik.ilnlg
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/EmotetCrypt.PEF!MTB
ArcabitTrojan.Generic.D29DCD25
ZoneAlarmTrojan.Win32.Agent.xaeleq
GDataTrojan.GenericKD.43896101
TACHYONTrojan/W32.VB-Agent.548864.AH
MalwarebytesTrojan.MalPack.TRE
ESET-NOD32Win32/Emotet.CB
SentinelOneDFI – Suspicious PE
FortinetW32/GenKryptik.ESZW!tr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Trojan.Win32.Agent.xaeleq?

Trojan.Win32.Agent.xaeleq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment