Trojan.Win32.Agent.xahzhv removal tips

The Trojan.Win32.Agent.xahzhv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Agent.xahzhv virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Attempts to repeatedly call a single API many times in order to delay analysis time
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

pastebin.com

ocsp.digicert.com

1fichier.com

How to determine Trojan.Win32.Agent.xahzhv?


File Info:
crc32: 7FD5F2D1
md5: df18127434df02b89ba3dc6c973ba603
name: DF18127434DF02B89BA3DC6C973BA603.mlw
sha1: 4a65beed86134b677afe991839d3750c0648c9d5
sha256: 4e825059cdc8c2116ff7737eead0e6482a2cbf0a5790deadd89202a4058765bd
sha512: db24255c66c52908e45807591b49c654379358e51754749dbef291fb6dda432f2386541dc519ce1abc5fde1c26448ee74e18f1b9ae93666a6ff7b235da82da2f
ssdeep: 393216:cVjSEKSHcI5aYG8UIm8qm8ZQf7ziwSBk6NCJRVaxlq:YxBnYUTSBxCEq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Setup Engine Copyright xa9 2004-2015 Indigo Rose Corporation
InternalName: suf_launch
FileVersion: 9.5.0.0
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: Created with Setup Factory
ProductName: Setup Factory Runtime
ProductVersion: 9.5.0.0
FileDescription: Setup Application
OriginalFilename: suf_launch.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Agent.xahzhv also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan-Downloader ( 005779501 )
ALYac	Trojan.GenericKD.46541528
Sangfor	Trojan.Win32.Ymacco.atmnm
Alibaba	TrojanDownloader:Win32/LUADownloader.d95dbd0b
K7GW	Trojan-Downloader ( 005779501 )
Cybereason	malicious.d86134
ESET-NOD32	Win32/TrojanDownloader.Agent.FNS
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Agent.xahzhv
BitDefender	Trojan.GenericKD.46541528
MicroWorld-eScan	Trojan.GenericKD.46541528
Ad-Aware	Trojan.GenericKD.46541528
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vc
FireEye	Trojan.GenericKD.46541528
Emsisoft	Trojan.GenericKD.46541528 (B)
Avira	TR/AD.LUADownloader.ywmak
eGambit	Unsafe.AI_Score_94%
Kingsoft	Win32.Troj.Agent.(kcloud)
Arcabit	Trojan.Generic.D2C62AD8
GData	Trojan.GenericKD.46541528
McAfee	Artemis!DF18127434DF
MAX	malware (ai score=87)
TrendMicro-HouseCall	TROJ_GEN.R007H0CFQ21
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.FNS!tr
AVG	Win32:Trojan-gen

How to remove Trojan.Win32.Agent.xahzhv?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Agent.xahzhv removal tips