Trojan.Win32.Agent.xbiqfo information

The Trojan.Win32.Agent.xbiqfo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xbiqfo virus can do?

Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Agent.xbiqfo?


File Info:
name: 823BBD78BA49F7D34475.mlw
path: /opt/CAPEv2/storage/binaries/229f0be19dfbad288cf27f5adef164cd5e905d4674b5ba1b59e3b90abe5cfb21
crc32: 0F736DD3
md5: 823bbd78ba49f7d344757a9e5318bae1
sha1: 3bf6151c46a84ff33835cff1fd7f39c7c569f8b5
sha256: 229f0be19dfbad288cf27f5adef164cd5e905d4674b5ba1b59e3b90abe5cfb21
sha512: 72ca5b22407ae715ff05b52b93259d250d2db865591b87447c61e1b23769000fa90c42af0b3ec9829dd58eb834d28934db806569b04eb0df03b493771e1f4eac
ssdeep: 98304:ztshbZfH2r6z9abIdGCtNgdXbyrgKzmDccAysrNh:ztUdy6VYC3mDccAySNh
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D5068B517F614062E01B3230553DE27DEBACFE224F27B2C762D8FE5B39710426AA1676
sha3_384: bf943a05738264cabb0dd7fc529cdaf0b18ed4a9e6b54c16762d56c4e53f52886d9b1a1f342be47b67f5476d76c49409
ep_bytes: 558bec837d0c017505e888080000ff75
timestamp: 2023-12-07 14:33:09

Version Info:
CompanyName: MSUN
FileDescription: MFC_GL
FileVersion: 1.0.0.1
InternalName: MFC_GL.exe
LegalCopyright: V.Petrov(MSUN.Vladivostok).  All rights reserved.
OriginalFilename: MFC_GL.exe
ProductName: TODO: NeHe Projects adapted to MFC MSVS-2015
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04b0

Trojan.Win32.Agent.xbiqfo also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.GenericKD.71150014
Skyhigh	BehavesLike.Win32.Dropper.wh
McAfee	Artemis!823BBD78BA49
Cylance	unsafe
Arcabit	Trojan.Generic.D43DA9BE
Kaspersky	Trojan.Win32.Agent.xbiqfo
BitDefender	Trojan.GenericKD.71150014
Avast	FileRepMalware [Misc]
Emsisoft	Trojan.GenericKD.71150014 (B)
VIPRE	Trojan.GenericKD.71150014
Kingsoft	Win32.HeurC.KVM008.a
ZoneAlarm	Trojan.Win32.Agent.xbiqfo
GData	Trojan.GenericKD.71150014
ALYac	Trojan.GenericKD.71150014
TrendMicro-HouseCall	TROJ_GEN.R002H09AA24
Rising	Trojan.Generic@AI.91 (RDML:n2B3YoMKV/FJF2L6ME2W3g)
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Trojan.Win32.Agent.xbiqfo?

Trojan.Win32.Agent.xbiqfo removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X