What is “Trojan.Win32.Agent.xahcbg”?

The Trojan.Win32.Agent.xahcbg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xahcbg virus can do?

Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xahcbg?


File Info:
crc32: 4A288D56
md5: ba08ebebc0859783501f5c5ad2e22425
name: BA08EBEBC0859783501F5C5AD2E22425.mlw
sha1: be28da8fc992816aa3d9de972c089c2118e7530b
sha256: 5617152b8493677c227634725624d3709234c3ebd17f5bbba50aac12871cd9e1
sha512: 49b11cd2dd5ccec17114e102039850db46a48222c4c174e85b96bfff71864f5cc051cb8c71434692d0e7baae25e43200a87381c29aba6e6df29f09df0e70da21
ssdeep: 6144:P9X0Gz5NXNIsFDwDuv0pyjeZRcuA7IvUJ+l:50yNJ600nZRh8J+l
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: Copyright pinewood king bolete
FileVersion: 42.73.21.19
CompanyName: Northern Uzbek Written Perso-Arabic Script
LegalTrademarks: crookback
Comments: UNSC
ProductName: lightbulb
FileDescription: Carpathos
Translation: 0x0409 0x04e4

Trojan.Win32.Agent.xahcbg also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKD.36426885
FireEye	Generic.mg.ba08ebebc0859783
CAT-QuickHeal	Trojan.Multi
Qihoo-360	Win32/Trojan.Generic.HyoDnf8A
McAfee	Artemis!BA08EBEBC085
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.36426885
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.bc0859
Cyren	W32/Injector.AFF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	Trojan.Win32.Agent.xahcbg
Alibaba	Trojan:Win32/SpyNoon.41cf675c
NANO-Antivirus	Trojan.Win32.Inject.insnyt
ViRobot	Trojan.Win32.Z.Injector.261974.B
Tencent	Win32.Trojan.Agent.Pefo
Ad-Aware	Trojan.GenericKD.36426885
Emsisoft	Trojan.GenericKD.36426885 (B)
F-Secure	Trojan.TR/AD.Swotter.mpool
DrWeb	Trojan.Siggen12.19093
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TrojanSpy.Win32.NOON.CLNE
McAfee-GW-Edition	BehavesLike.Win32.Ipamor.dc
Sophos	Generic PUA FC (PUA)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Avira	TR/AD.Swotter.mpool
Microsoft	Trojan:Win32/SpyNoon.SS!MTB
Gridinsoft	Trojan.Win32.Agent.oa
Arcabit	Trojan.Generic.D22BD485
AhnLab-V3	Malware/Win32.Trojanspy.C4364594
ZoneAlarm	HEUR:Trojan-Spy.Win32.Noon.gen
GData	Win32.Trojan-Stealer.FormBook.S73BNI
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win32/Injector.EOSQ
BitDefenderTheta	Gen:NN.ZedlaF.34608.eq7@aKyq5g
ALYac	Trojan.GenericKD.36426885
Malwarebytes	Trojan.Injector
Panda	Trj/CI.A
TrendMicro-HouseCall	TrojanSpy.Win32.NOON.CLNE
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Trojan.Agent
Fortinet	W32/Injector.AFC!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Trojan.Win32.Agent.xahcbg?

Trojan.Win32.Agent.xahcbg removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X