Trojan

Trojan.Win32.Agent.xbnxgu removal guide

Malware Removal

The Trojan.Win32.Agent.xbnxgu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Agent.xbnxgu virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xbnxgu?


File Info:

name: CB63152E310FB17434C0.mlw
path: /opt/CAPEv2/storage/binaries/67ccae47d0e66b0f47cb42586eeca39defb8c90b41cf41fc35f4199456216302
crc32: C52C5571
md5: cb63152e310fb17434c0d35c6e65c8e7
sha1: e14b00664e1b01f794fec8c477e900d7a5ede260
sha256: 67ccae47d0e66b0f47cb42586eeca39defb8c90b41cf41fc35f4199456216302
sha512: 8a94e7c27a68d28f3717a35dd325c6da94b22096d238dbdeba01d812c2bb47549dd62c390f277e07e56f60f40291c07ce4c23287d7bcc6ed3f31a5d631d77b3b
ssdeep: 3072:KbAUogI3IC5UtbYcPztjRf8/ECh6PIpwnmHexVTeoaU8VNP+XVlN:KbHoG2Ut/PJjRfn0Kuoa9/P+X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T131A494929C64AF45FE16453427956EBA004E7D2F66E4422C785CFA0B337399B30AFD0B
sha3_384: 6a9bc515c60323a12e390fab84efb170747eea259ea8ad1fbfc70b718801a4b219dc8460547602e08b242833591ab3d4
ep_bytes: 68e4914200e8eeffffff000000000000
timestamp: 2019-01-19 13:34:56

Version Info:

CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Kawaii-Unicorn
OriginalFilename: Kawaii-Unicorn.exe
Translation: 0x0804 0x04b0

Trojan.Win32.Agent.xbnxgu also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGeneric.Dacic.94CCEEA9.A.B3DE2089
FireEyeGeneric.mg.cb63152e310fb174
SkyhighBehavesLike.Win32.Generic.gt
McAfeeGenericRXTC-TT!CB63152E310F
MalwarebytesGeneric.Malware.AI.DDS
VIPREGeneric.Dacic.94CCEEA9.A.B3DE2089
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 0054717e1 )
K7GWP2PWorm ( 0054717e1 )
VirITTrojan.Win32.VBUnicorn.AA
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/VBClone.E
APEXMalicious
ClamAVWin.Packed.Generic-9967832-0
KasperskyTrojan.Win32.Agent.xbnxgu
BitDefenderGeneric.Dacic.94CCEEA9.A.B3DE2089
NANO-AntivirusTrojan.Win32.VB.jownbp
SUPERAntiSpywareTrojan.Agent/Gen-Tedy
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.VB.ha
EmsisoftGeneric.Dacic.94CCEEA9.A.B3DE2089 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.MulDrop20.3145
ZillyaTrojan.VBGen.Win32.1
SophosTroj/VB-KCP
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=84)
JiangminTrojan.VB.bmcx
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/VB.VM.gen!Eldorado
Antiy-AVLTrojan/Win32.VBClone
Kingsoftmalware.kb.a.966
MicrosoftTrojan:Win32/Fareit.VB!MTB
ArcabitGeneric.Dacic.94CCEEA9.A.B3DE2089
ZoneAlarmTrojan.Win32.Agent.xbnxgu
GDataGeneric.Dacic.94CCEEA9.A.B3DE2089
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Fareit.R626300
BitDefenderThetaGen:NN.ZevbaF.36804.Dm0@auM3n0mb
ALYacGeneric.Dacic.94CCEEA9.A.B3DE2089
VBA32SScope.Trojan.VB
Cylanceunsafe
RisingTrojan.VBClone!1.B5C7 (CLASSIC)
IkarusTrojan.Win32.VBClone
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Win32.Agent.xbnxgu?

Trojan.Win32.Agent.xbnxgu removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment