Trojan.Win32.Agent.xahbzn removal instruction

The Trojan.Win32.Agent.xahbzn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xahbzn virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xahbzn?


File Info:
crc32: 1FEBF2A1
md5: 9d201999f5aace1194ee3947f2585936
name: 9D201999F5AACE1194EE3947F2585936.mlw
sha1: 56b2ae047eb7d4390852b56635f9e5631e1ed53f
sha256: 7ad36d3f343d7d8357c9ca31d9ed0218c7913608b76e9cc6a98f4b1a7369fd55
sha512: 9f430f5ac6a35106e20434bd4ecee7ceeb55a07d757dd349a09ca0adb4b5b4df9216cbe3c8d4d1988aedfeb159a6f3c9367646fd734ecd6e70ee2d3bf065a3da
ssdeep: 6144:F9X0GEgj5fSkuGDm/ldiFhMhKDrR6SBNbCax3X/DDnYeq2//1t/S6:b0bkwsYldEMhYt6WbC2P8231t/S6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright Chenchu Written
FileVersion: 14.15.92.21
CompanyName: Andorra
LegalTrademarks: dehumidify
Comments: Oriya Cluster
ProductName: Sidaamo Written
FileDescription: multidrug resistance
Translation: 0x0409 0x04e4

Trojan.Win32.Agent.xahbzn also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36425272
FireEye	Generic.mg.9d201999f5aace11
McAfee	Artemis!9D201999F5AA
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Agent.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005788e31 )
BitDefender	Trojan.GenericKD.36425272
K7GW	Trojan ( 005788e31 )
Cybereason	malicious.47eb7d
Cyren	W32/Injector.AFC.gen!Eldorado
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	Trojan.Win32.Agent.xahbzn
Alibaba	Trojan:Win32/SpyNoon.ddbc66b9
Rising	Trojan.Injector!8.C4 (CLOUD)
Ad-Aware	Trojan.GenericKD.36425272
Sophos	Mal/Generic-S
Comodo	Malware@#3bsgl2h91vyuy
DrWeb	BackDoor.SpyBotNET.25
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gc
Emsisoft	Trojan.GenericKD.36425272 (B)
Ikarus	Trojan.Agent
Avira	TR/AD.AgentTesla.gkqkv
MAX	malware (ai score=86)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/SpyNoon.SS!MTB
Gridinsoft	Trojan.Win32.Downloader.sa
Arcabit	Trojan.Generic.D22BCE38
ZoneAlarm	HEUR:Trojan.Win32.Injects.gen
GData	Trojan.GenericKD.36425272
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.AgentTesla.C4357062
Malwarebytes	Trojan.Loader
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.EOSH
TrendMicro-HouseCall	Trojan.Win32.MALREP.THCOCBA
Tencent	Win32.Trojan.Agent.Hufg
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.AFC!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.Generic.HyoDnPoA

How to remove Trojan.Win32.Agent.xahbzn?

Trojan.Win32.Agent.xahbzn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X