Trojan.Win32.Agent.xahazr malicious file

The Trojan.Win32.Agent.xahazr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xahazr virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xahazr?


File Info:
crc32: C56BF8C9
md5: f9d5cde02421851e63c36f227ff1db62
name: F9D5CDE02421851E63C36F227FF1DB62.mlw
sha1: 6bb218d2ce85b724d4d431d67affed25da2280a9
sha256: 5ef2ac4a085e0ad9f43f72a645d0dfe77389b6f2fcc7fc4323df59aecaafa3d2
sha512: bf9c73f0b42ed5bf1c91d2a96fbbb586f651ccef56293f7da515fe71670b1f0e08fc99d21f7b738eac15b19e3d9e256688a5e802738e63b8ff91375baea43039
ssdeep: 24576:7fZJ0hupYpdwNvq+LoNEmEE1lQfzr54sz+LQqtJ:7fZJUYidwDsNNL3QfzrB+LNtJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright crookback
FileVersion: 90.3.82.95
CompanyName: Bualkhaw Chin
LegalTrademarks: pinewood king bolete
Comments: Daniella
ProductName: scat
FileDescription: mind
Translation: 0x0409 0x04e4

Trojan.Win32.Agent.xahazr also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Cerbu.91704
FireEye	Generic.mg.f9d5cde02421851e
McAfee	RDN/GenericM
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Cerbu.91704
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.024218
Cyren	W32/Injector.AEY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:InjectorX-gen [Trj]
Kaspersky	Trojan.Win32.Agent.xahazr
Alibaba	Trojan:Win32/Androm.901f77af
AegisLab	Trojan.Win32.Androm.4!c
Rising	Trojan.Injector!8.C4 (CLOUD)
Emsisoft	Gen:Variant.Cerbu.91704 (B)
F-Secure	Trojan.TR/Injector.lsasy
DrWeb	Trojan.Inject4.7723
McAfee-GW-Edition	BehavesLike.Win32.Dropper.bc
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Injector
Avira	TR/Injector.cxkql
MAX	malware (ai score=85)
Kingsoft	Win32.Troj.Agent.(kcloud)
Microsoft	Trojan:Win32/Androm.RF!MTB
Gridinsoft	Trojan.Win32.Downloader.sa
Arcabit	Zum.Androm.1
ZoneAlarm	HEUR:Trojan.Win32.Crypt.gen
GData	MSIL.Backdoor.Quasar.VUFOMK
Cynet	Malicious (score: 100)
Malwarebytes	Trojan.Injector.DL.Generic
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.EORU
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.EONL!tr
AVG	Win32:InjectorX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Win32/Backdoor.Androm.HyoDiLsA

How to remove Trojan.Win32.Agent.xahazr?

Trojan.Win32.Agent.xahazr removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X