Troj/Steal-FL removal instruction

Malware Removal

The Troj/Steal-FL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Troj/Steal-FL virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Steals private information from local Internet browsers
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed mail clients

How to determine Troj/Steal-FL?


File Info:

crc32: CF08ACD4
md5: 6adb353bff736a865aa5981255d3e287
name: ago.exe
sha1: 736d062566df902408cd68a00e68a98e226685d4
sha256: d4c36410509b53807f0edce4e0bbb9c9fed8da9aedcb045ea89f6604f3db33b1
sha512: 76a1c4b012f0fa8cffd82c579570bc2a2c8c746bc2d670bd3772071e2eed603213251fe86609d27ba5917fe85cefd25a0032be6bc49bbd5302e14f6427cbbfd9
ssdeep: 6144:jKlhrLSW+eN4AM0gZEXgSt9jZH3JNbrj0j3ZOI+A1A/n6vcb0:jKlhreMXgZEQS7oh1A/
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: ywbUuwrUUSISIrrLtXYGpohSggvkaTLCJDLZ.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: ywbUuwrUUSISIrrLtXYGpohSggvkaTLCJDLZ.exe

Troj/Steal-FL also known as:

MicroWorld-eScanGen:Variant.Razy.577898
FireEyeGeneric.mg.6adb353bff736a86
Qihoo-360HEUR/QVM03.0.2EE1.Malware.Gen
ALYacGen:Variant.Razy.577898
CylanceUnsafe
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Razy.577898
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.bff736
TrendMicroTROJ_GEN.R044C0DBA20
BitDefenderThetaAI:Packer.ACF35DCD20
CyrenW32/MSIL_Troj.RC.gen!Eldorado
SymantecTrojan Horse
TrendMicro-HouseCallTROJ_GEN.R044C0DBA20
Paloaltogeneric.ml
ClamAVWin.Packed.Razy-7426372-0
GDataGen:Variant.Razy.577898
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.a
NANO-AntivirusTrojan.Win32.Gen8.habblb
RisingSpyware.AgentTesla!1.B864 (CLASSIC)
Ad-AwareGen:Variant.Razy.577898
SophosTroj/Steal-FL
F-SecureTrojan.TR/Spy.Gen8
DrWebTrojan.PWS.AgenslaNET.1
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Razy.577898 (B)
APEXMalicious
F-ProtW32/MSIL_Troj.RC.gen!Eldorado
AviraTR/Spy.Gen8
MAXmalware (ai score=84)
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.D8D16A
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.a
MicrosoftBackdoor:MSIL/Remcos!MTB
SentinelOneDFI – Malicious PE
AhnLab-V3Trojan/Win32.AgentTesla.C3450450
McAfeeGenericRXJM-ZY!6ADB353BFF73
ESET-NOD32a variant of MSIL/Spy.Agent.AES
TencentWin32.Trojan.Spy.Wskp
IkarusWin32.Outbreak
eGambitUnsafe.AI_Score_100%
FortinetMSIL/Spy.AES!tr
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Troj/Steal-FL?

Troj/Steal-FL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment