Trojan

How to remove “Trojan.Agent.CFMF”?

Malware Removal

The Trojan.Agent.CFMF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CFMF virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan.Agent.CFMF?


File Info:

name: F9063538C167A642FE75.mlw
path: /opt/CAPEv2/storage/binaries/d6c757375719650369acadefea93571b14129d4c5f0f7e8d178c571adc28f073
crc32: FB041A75
md5: f9063538c167a642fe75c95db3ec6776
sha1: 0e6db555f5e02585395739ffac45f242434fed8c
sha256: d6c757375719650369acadefea93571b14129d4c5f0f7e8d178c571adc28f073
sha512: 2b4b2787541fd5767d00318c1960d03df0381e26aebdc3716935d2d9882adb8b6d649e967bc2ef771c38cf0b4442fff1c37f692ff92d79118eac45b3449279a7
ssdeep: 24576:FpmF8VrfzrSYGq43aSOH4YA0onhgxOcB:eAfzWYGqDwK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1B1055D36B2E1C537D4B3167CDD6BB2A9947979210E2C844B7AE40F4C1B3A6413E3E297
sha3_384: 283de8a11bd2e8173986fdf16ab8ea3563e498cef309db0fd0561a5abef7f1f7b9711740ac8e9d3c94b985eb9f7913fb
ep_bytes: 558bec83c4bc53565733c08945c08945
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan.Agent.CFMF also known as:

tehtrisGeneric.Malware
DrWebBackDoor.Siggen2.2039
MicroWorld-eScanTrojan.Agent.CFMF
CAT-QuickHealTjnSpy.Banker.S732084
SkyhighBehavesLike.Win32.Emotet.ch
McAfeePWS-FCJC!F9063538C167
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusSpyware ( 000ad77c1 )
AlibabaTrojanSpy:Win32/Banker.3ff51de8
K7GWSpyware ( 000ad77c1 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Banker.ADTX
APEXMalicious
ClamAVWin.Malware.Delf-9786288-0
KasperskyHEUR:Trojan-Dropper.Win32.Dapato.gen
BitDefenderTrojan.Agent.CFMF
NANO-AntivirusTrojan.Win32.Banker.enagtf
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.10b3137c
EmsisoftTrojan.Agent.CFMF (B)
GoogleDetected
F-SecureTrojan.TR/Spy.Banker.Gen7
VIPRETrojan.Agent.CFMF
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.f9063538c167a642
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Agent.auuk
VaristW32/DelfInject.A.gen!Eldorado
AviraTR/Spy.Banker.Gen7
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.TSGeneric
Kingsoftmalware.kb.a.972
MicrosoftTrojanSpy:Win32/Banker
XcitiumMalware@#27nf7c58azogm
ArcabitTrojan.Agent.CFMF
ZoneAlarmHEUR:Trojan-Dropper.Win32.Dapato.gen
GDataTrojan.Agent.CFMF
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Agent.R477903
VBA32BScope.TrojanSpy.Banker
ALYacTrojan.Agent.CFMF
Cylanceunsafe
PandaTrj/Genetic.gen
RisingSpyware.Banker!1.ABA2 (CLASSIC)
YandexTrojan.GenAsa!l2rdDN6cGdE
IkarusTrojan-Spy.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.fam!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Agent.CFMF?

Trojan.Agent.CFMF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment