Trojan

Trojan.Win32.Agent.xbnsls removal tips

Malware Removal

The Trojan.Win32.Agent.xbnsls is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Win32.Agent.xbnsls virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xbnsls?



File Info:

name: 60588D5B9A37C33966C3.mlw
path: /opt/CAPEv2/storage/binaries/d87ec55d512121305d76a13580fe7875240679b0b78e9e5a5b78efd68702ecaf
crc32: 7706A13B
md5: 60588d5b9a37c33966c3e9485b89c89a
sha1: cb7f56c8cec2c4735fe4a20c49fca072a023e07a
sha256: d87ec55d512121305d76a13580fe7875240679b0b78e9e5a5b78efd68702ecaf
sha512: 8f689b899a9c9163392a86dfe2d6a1cd85c3f4685759a160a8f515c92eedd8d34cc532b019e72aeb4229ff2b4ea1b8ccf5ca689c817bfb0a9ad5a431a03270d6
ssdeep: 3072:ZTmvAkodf0r/d4CZWxWn8sNzJlvnqnxius:ZTeo+l4CF88zJlPqnxiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T161048F628970BB13E951093517E06BFB801D3C2F4BE5060A7CAEDA5F3763D9A349F942
sha3_384: 1f2699d8a7878530a6eef7d7edd89f7c454157a31dbf157a0236dc5746a84229bfa13fa53f42bc1fe5b47de6254357db
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09


Version Info:

Translation: 0x0804 0x04b0
Com๰anyName: aa
ProductName: Kawaii-Unicorn
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Kawaii-Unicorn
OriginalFilename: Kawaii-Unicorn.exe

Trojan.Win32.Agent.xbnsls also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.490375
CAT-QuickHealTrojan.MuldVMF.S21469993
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHC-SS!60588D5B9A37
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Zusy.490375
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 00581a9e1 )
K7GWP2PWorm ( 00581a9e1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FNGV
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R03BC0DDN24
ClamAVWin.Malware.Midie-6847893-0
KasperskyTrojan.Win32.Agent.xbnsls
BitDefenderGen:Variant.Zusy.490375
NANO-AntivirusTrojan.Win32.Banker1.fnwqkb
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
EmsisoftGen:Variant.Zusy.490375 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.MulDrop17.61497
TrendMicroTROJ_GEN.R03BC0DDN24
FireEyeGeneric.mg.60588d5b9a37c339
SophosMal/VB-AQT
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=88)
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/VB_Troj.J.gen!Eldorado
Antiy-AVLTrojan/Win32.Wacatac.b
Kingsoftmalware.kb.a.997
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
ArcabitTrojan.Zusy.D77B87
ZoneAlarmTrojan.Win32.Agent.xbnsls
GDataWin32.Trojan.VBClone.B
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R252862
VBA32SScope.Trojan.VB
ALYacGen:Variant.Zusy.490375
TACHYONTrojan/W32.VB-Agent.188488.K
Cylanceunsafe
RisingTrojan.VBClone!1.E032 (CLASSIC)
YandexTrojan.Agent!IGpZDJONEdc
IkarusTrojan.Crypt
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
BitDefenderThetaAI:Packer.1DDCF60A20
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Win32.Agent.xbnsls?

Trojan.Win32.Agent.xbnsls removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment