Trojan

How to remove “Trojan.Agent.FAHP”?

Malware Removal

The Trojan.Agent.FAHP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.FAHP virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.Agent.FAHP?


File Info:

crc32: AB1DAC35
md5: e2b689d1ff72b06753093b3da2a0820f
name: E2B689D1FF72B06753093B3DA2A0820F.mlw
sha1: 6d0246d855f30c73c5f64dd650c5650bda212fe9
sha256: 3818bc3102f7720dd7fe245e316b1e2c6f9687c511e31f51cb676e8bbadac1b5
sha512: de0ca219c1c9ed19c8812d161ae78532c4afc8f655fa486529e8525232ca22ff465f517bfb9b78a3b608fffdf84c755d26b3b0e73fdc591356017f16a887da05
ssdeep: 24576:tXSa7I6q7l7cWeKxbOhzimtoR+EZrBS3SRanUA:tXrUfeobsfoRftUUA
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: ICloneable.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: CarInventory
ProductVersion: 1.0.0.0
FileDescription: CarInventory
OriginalFilename: ICloneable.exe

Trojan.Agent.FAHP also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.FAHP
FireEyeGeneric.mg.e2b689d1ff72b067
ALYacTrojan.Agent.FAHP
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Agent.FAHP
K7GWRiskware ( 0040eff71 )
CyrenW32/MSIL_Kryptik.CKT.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojanPSW:MSIL/Agensla.63f87da9
ViRobotTrojan.Win32.Z.Undef.1073664
Ad-AwareTrojan.Agent.FAHP
EmsisoftTrojan.Agent.FAHP (B)
F-SecureTrojan.TR/AD.AgentTesla.njjwg
McAfee-GW-EditionPWS-FCTY!E2B689D1FF72
SophosMal/Generic-S
AviraTR/AD.AgentTesla.njjwg
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftBackdoor:Win32/Bladabindi!ml
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Agent.FAHP
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataTrojan.Agent.FAHP
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.MSILKrypt.R357703
McAfeePWS-FCTY!E2B689D1FF72
MalwarebytesTrojan.MalPack.PNG.Generic
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.YZT
TrendMicro-HouseCallTROJ_GEN.F0D1C00LB20
YandexTrojan.Igent.bUXXyb.5
MAXmalware (ai score=84)
FortinetMSIL/Kryptik.YZN!tr
BitDefenderThetaGen:NN.ZemsilF.34688.bn0@amCLb9e
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Generic/HEUR/QVM03.0.DA5B.Malware.Gen

How to remove Trojan.Agent.FAHP?

Trojan.Agent.FAHP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment