How to remove “Worm:Win32/Xolxo.A”?

Malware Removal

The Worm:Win32/Xolxo.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Worm:Win32/Xolxo.A virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Exhibits possible ransomware file modification behavior
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

How to determine Worm:Win32/Xolxo.A?


File Info:

crc32: 71EAC582
md5: a884447b402dbcdf626c8689d2bf0ec1
name: A884447B402DBCDF626C8689D2BF0EC1.mlw
sha1: af17a50f43785dd58a1082a125624c76f1474c86
sha256: d58a27feb951d576cc4a4e6c8c497add6018e766742aadcd2de396d00404ba45
sha512: 6924bfe802f6b9f6d5237acb496e1034bfeccb8d24b0c55b83990f6a99fcca4b342dfd62bd6bef838e62e26c9a4081fe296ed4abebff54c005dbb46723870caa
ssdeep: 24576:yxbFhVZ5DEPjO7KX53RTh0tFda3Z0ew37HK9NGDt3YZ3y7paewsAjo:yx5fDErOO53RTqti+f7HK9NGDtoZZljo
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Worm:Win32/Xolxo.A also known as:

BkavW32.OverlayUPXDPM.PE
K7AntiVirusTrojan ( 0053c5661 )
Elasticmalicious (high confidence)
DrWebWin32.HLLP.Bagar
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.42006008
CylanceUnsafe
ZillyaWorm.Delf.Win32.340
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
Alibabavirus:Win32/InfectPE.ali2000007
K7GWTrojan ( 0053c5661 )
Cybereasonmalicious.b402db
BaiduWin32.Virus.Lamer.f
CyrenW32/P2P_Worm.WULF-7526
SymantecW32.SillyP2P
ESET-NOD32Win32/Delf.NAY
APEXMalicious
AvastWin32:Delf-SVI [Trj]
ClamAVWin.Worm.Delf-6980489-0
KasperskyVirus.Win32.Lamer.fg
BitDefenderTrojan.GenericKD.42006008
NANO-AntivirusTrojan.Win32.Delf.oxkq
ViRobotWin32.BagarBubba.A
MicroWorld-eScanTrojan.GenericKD.42006008
TencentVirus.Win32.Lamer.fg
Ad-AwareTrojan.GenericKD.42006008
SophosMal/Generic-R + Mal/Generic-E
ComodoTrojWare.Win32.Pincav.AV@2rw0ny
F-SecureDropper.DR/Delphi.Gen
BitDefenderThetaGen:NN.ZelphiF.34670.UnJfa8zpB9e
VIPREBehavesLike.Win32.Malware.bsm (vs)
TrendMicroPE_SILLY.T
McAfee-GW-EditionBehavesLike.Win32.HLLP.th
FireEyeGeneric.mg.a884447b402dbcdf
EmsisoftTrojan.GenericKD.42006008 (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm/Delf.vm
AviraDR/Delphi.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.Delf
KingsoftWin32.Infected.AutoInfector.a.(kcloud)
MicrosoftWorm:Win32/Xolxo.A
GridinsoftTrojan.Win32.Xolxo.bot!s2
ArcabitTrojan.Generic.D280F5F8
AegisLabVirus.Win32.Lamer.kYNN
ZoneAlarmVirus.Win32.Lamer.fg
GDataTrojan.GenericKD.42006008
TACHYONWorm/W32.Delf
AhnLab-V3Win32/Lamer
Acronissuspicious
McAfeeW32/HLLP.11042
MAXmalware (ai score=83)
VBA32Worm.Delf
MalwarebytesLamer.Virus.FileInfector.DDS
TrendMicro-HouseCallPE_SILLY.T
RisingWorm.P2p.Delf.z (RDMK:cmRtazqvOtgihm3hsIeLkL2B7VG2)
IkarusTrojan.Win32.Buzus
MaxSecureVirus.Win32.Lamer.FG
FortinetW32/Aple.A!dam
AVGWin32:Delf-SVI [Trj]
Paloaltogeneric.ml
Qihoo-360Virus.Win32.Viking.LG

How to remove Worm:Win32/Xolxo.A?

Worm:Win32/Xolxo.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment