Trojan

Trojan.Win32.Agent.xblzkz removal tips

Malware Removal

The Trojan.Win32.Agent.xblzkz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Win32.Agent.xblzkz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xblzkz?



File Info:

name: F38EFAA5524D515ECB43.mlw
path: /opt/CAPEv2/storage/binaries/4040ee668d501875c6fa54289ad01d19e7a336bb6b7b17cd7a880b1238101728
crc32: AAB1349F
md5: f38efaa5524d515ecb43308f26ff171c
sha1: 9a4f196d2f89ec330c75e44d163660655dffa977
sha256: 4040ee668d501875c6fa54289ad01d19e7a336bb6b7b17cd7a880b1238101728
sha512: add7fd0531329a50df8dba765b4fa741e7ffb5dce8114907580d9ad435971b54b049716a4e22046436753f910f9dc5017cf3e966222dc0e2561bd1753ef04e19
ssdeep: 3072:qmUt3kon0jr3d4IZWJBn8stz8lvnqnxius:qmBogt4IM8cz8lPqnxiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB048F228970BB13E951093517E06BFB801D3D2F4BE5060A7CADDA5F3763D9A349FA42
sha3_384: f8fb46fe87c894abd6e908c65cb2801f91b2e4ac62da339176889eccf4b940c06c7d06bc5aecb553d496a31cfca1a859
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09


Version Info:

Translation: 0x0804 0x04b0
Com๰anyName: aa
ProductName: Kawaii-Unicorn
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Kawaii-Unicorn
OriginalFilename: Kawaii-Unicorn.exe

Trojan.Win32.Agent.xblzkz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop17.61497
MicroWorld-eScanGen:Variant.Zusy.490375
CAT-QuickHealTrojan.MuldVMF.S21469993
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHC-SS!F38EFAA5524D
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 00581a9e1 )
K7GWP2PWorm ( 00581a9e1 )
Cybereasonmalicious.5524d5
BitDefenderThetaAI:Packer.1DDCF60A20
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FNGV
APEXMalicious
ClamAVWin.Malware.Midie-6847893-0
KasperskyTrojan.Win32.Agent.xblzkz
BitDefenderGen:Variant.Zusy.490375
NANO-AntivirusTrojan.Win32.Banker1.fnwqkb
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
EmsisoftGen:Variant.Zusy.490375 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREGen:Variant.Zusy.490375
FireEyeGeneric.mg.f38efaa5524d515e
SophosMal/VB-AQT
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=81)
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/VB_Troj.J.gen!Eldorado
Antiy-AVLTrojan/Win32.Wacatac.b
Kingsoftmalware.kb.a.997
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
ArcabitTrojan.Zusy.D77B87
ZoneAlarmTrojan.Win32.Agent.xblzkz
GDataWin32.Trojan.VBClone.B
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R252862
VBA32SScope.Trojan.VB
ALYacGen:Variant.Zusy.490375
TACHYONTrojan/W32.VB-Agent.188476.J
Cylanceunsafe
RisingTrojan.VBClone!1.E032 (CLASSIC)
IkarusTrojan.Crypt
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudTrojan:Multi/Muldrop.B

How to remove Trojan.Win32.Agent.xblzkz?

Trojan.Win32.Agent.xblzkz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment