Malware

What is “fsg”?

Malware Removal

The fsg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What fsg virus can do?

  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Spanish (Modern)
  • The binary likely contains encrypted or compressed data.
  • Sniffs keystrokes
  • Checks for the presence of known windows from debuggers and forensic tools
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine fsg?



File Info:

crc32: 663101DC
md5: 52c3b25119f76c6e8a63d4a035bbbd87
name: Darkest-Hour-1.00-10-Trainer.exe
sha1: 0dff2c6147956c9f82ba01ea76b7072097f3f8ca
sha256: 22fb1c0b52da7d0fc0d66bf81bfc8c39aac6d470f4b47a3ab9bd8c8e463d9a62
sha512: cf6d55ada2cffc384c55c02714967d94575958eb0296854782d4d7f513cce3a3894b5d9d8335e486aa56fbec47f0f4e660a1950ad8908c0f0c38d02ea6cf5229
ssdeep: 49152:t7W6+D2Qjrvvm4n9iCyXUH6u0/zZM5AXS:FYDtvj9iaH6/3S
type: MS-DOS executable


Version Info:

LegalCopyright: www.sicheats.com
InternalName: SC Engine Trainer
FileVersion: 3.4.10.3430
CompanyName: www.sicheats.com
LegalTrademarks: www.sicheats.com
Comments: www.sicheats.com
ProductName: www.sicheats.com
ProductVersion: 3.4.10.2694
SC Engine Homepage: http://www.sicheats.com/
FileDescription: SC Engine Trainer
Thanks to: DarkByte
OriginalFilename: SC Trainer
Description: SC Engine Trainer
Translation: 0x040a 0x04e4

fsg also known as:

CMCPacked.Win32.TDSS!O
McAfeeArtemis!52C3B25119F7
VIPRETrojan.Win32.Delf.abt (fs)
SUPERAntiSpywareTrojan.Agent/Gen-FSG
K7GWUnwanted-Program ( 004b8a1e1 )
K7AntiVirusUnwanted-Program ( 004b8a1e1 )
BaiduWin32.Trojan.WisdomEyes.151026.9950.9967
F-ProtW32/Heuristic-162!Eldorado
SymantecDownloader
TrendMicro-HouseCallPAK_Generic.002
NANO-AntivirusTrojan.Win32.CheatEngine.bbfuof
ViRobotTrojan.Win32.Z.Agent.1927884[h]
ComodoPacked.Win32.MFSG.Gen
DrWebTrojan.Siggen4.30252
ZillyaTrojan.Yakes.Win32.4882
TrendMicroPAK_Generic.002
McAfee-GW-EditionBehavesLike.Win32.Ramnit.tc
SophosGeneric PUA AN (PUA)
CyrenW32/Heuristic-162!Eldorado
AVwareTrojan.Win32.Delf.abt (fs)
Baidu-InternationalHacktool.Win32.CheatEngine.BAB
ESET-NOD32a variant of Win32/HackTool.CheatEngine.AB potentially unsafe
RisingTrjoan.Generic-ial8bp4VJoE (Cloud)
YandexRiskware.HackTool!mTWuy+I99DQ
IkarusTrojan.Swizzor
FortinetRiskware/CheatEngine
AVGfsg
PandaTrj/CI.A

How to remove fsg?

fsg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment