Trojan.Win32.Agent.xbcswo removal guide

The Trojan.Win32.Agent.xbcswo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xbcswo virus can do?

Authenticode signature is invalid

How to determine Trojan.Win32.Agent.xbcswo?


File Info:
name: C71E9F8FFD2FF38FADD9.mlw
path: /opt/CAPEv2/storage/binaries/5c34f2856512e37f1b52b38eaab29f95c6fbd7dd500de6bbc44aa842084ac7af
crc32: FC54F924
md5: c71e9f8ffd2ff38fadd9a9b7597979ff
sha1: 120706fece565edc74fcde4b27d075cc802e2511
sha256: 5c34f2856512e37f1b52b38eaab29f95c6fbd7dd500de6bbc44aa842084ac7af
sha512: cae77ad323e7f70cc6e65b462c2de5e17005b3821d88bc5ddb8ee0c5f4682d1285184dc0713fd8749955fcae36a49c19a54c05671c5b27b101a46cca9e58802b
ssdeep: 24576:+ECgyJLvUSxcNfFS5Dtn6qoa5xBTGqB8/4ejcpwR7W9FexviRLIt5n/z4:mgyJqNNSRwqoaLBTtB+vCeFMLCN/z4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T132E59E77B751C225F98202B18D0E872FCBEA9D76076840EFA1DC062565E05D32E396EF
sha3_384: e04db2ac14ccdf93daf772df32653d64ab170b109f56542f4595faccefa7e84c7be0b2b28235d67fb33e5b7f16ed458e
ep_bytes: e81e19d8c3e91e19cd39cccccccccccc
timestamp: 2011-01-27 10:43:15

Version Info:
0: [No Data]

Trojan.Win32.Agent.xbcswo also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.AirAdInstaller.l4av
Malwarebytes	Crypt.Trojan.MSIL.DDS
Sangfor	Trojan.Win32.Agent.V0lb
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.xbcswo
Avast	Win32:MalwareX-gen [Trj]
F-Secure	Trojan.TR/Redcap.xleec
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Avira	TR/Redcap.xleec
Xcitium	Malware@#hs822zcilpc2
ZoneAlarm	Trojan.Win32.Agent.xbcswo
Microsoft	Trojan:Win32/Synder!ic
McAfee	Artemis!C71E9F8FFD2F
VBA32	Malware-Cryptor.Hlux.2
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:pUaNefQVVwjDxYz5LINaXA)
Ikarus	Trojan-Spy.Agent
Fortinet	PossibleThreat.PALLAS.M
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.Win32.Agent.xbcswo?

Trojan.Win32.Agent.xbcswo removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X