We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
BrowserModifier:Win32/Xiazai
Aliases: No associated aliases
Summary
Microsoft Defender Antivirus detects and removes this unwanted software.
This program installs unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
For more information about this threat, read the Windows Security blog:
MSRT June 2017: Removing sneaky Xiazai
This threat is an unwanted software. An unwanted software is a program that alters your Windows experience without your consent or control. We use a set of evaluation criteria to determine what programs are classified as unwanted software. As the software ecosystem evolves, so do our evaluation criteria. To learn more, read these blog entries:
- Protecting customers from being intimidated into making an unnecessary purchase
- Cleaners ought to be clean (and clear)
- A brief discourse on ‘Changing browsing experience’
- Keeping browsing experience in users’ hands
- Keeping Browsing Experience in Users’ Hands, an Update...
- Cleaning up misleading advertisements
- Adware: A new approach
Use the following free Microsoft software to detect and remove this threat:
- Windows Defender for Windows 8.1 and Windows 10, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
You should also run a full scan. A full scan might find hidden malware.
Remove programs
You might need to manually remove this program:
Use cloud protection
The Microsoft Active Protection Service (MAPS) uses cloud protection to help guard against the latest malware threats. It’s turned on by default for Microsoft Security Essentials and Windows Defender for Windows 10.
Get more help
You can also see our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
If you’re using Windows XP, see our Windows XP end of support page.
