Trojan

Trojan.Agent.FBHA removal

Malware Removal

The Trojan.Agent.FBHA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.FBHA virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Trojan.Agent.FBHA?


File Info:

crc32: 2C556B45
md5: 109c53cc0ac1de61718ed0a094ca023e
name: 109C53CC0AC1DE61718ED0A094CA023E.mlw
sha1: f858063672696c39d9e52bd64cf091bcb2ceaa3a
sha256: 153e00cbe7235c639974bb2040e5fd8e842614b443f9d7889da80fd54a5ad5ad
sha512: f8e7f553c3cbc988f139538a260284b8a147312497393c77310275e1d386e244d10f6c036890e063e5eba24c549c33a09e9288b436dff12b6fe60e3efdc507b3
ssdeep: 6144:Rs+9DR9L2Y6fGKUjts0/UCLk3+gA5sE5uHdmBRRR:6kvIfnMs596S9m
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.FBHA also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.FBHA
FireEyeGeneric.mg.109c53cc0ac1de61
ALYacTrojan.Agent.FBHA
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderTrojan.Agent.FBHA
K7GWSpyware ( 0040f0131 )
K7AntiVirusSpyware ( 0040f0131 )
CyrenW32/Trojan.IDKD-7795
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
KasperskyTrojan-Banker.Win32.RTM.hgz
AlibabaTrojanBanker:Win32/Kryptik.d2e9270e
RisingTrojan.Kryptik!8.8 (TFE:2:ItOo6ejRx2)
Ad-AwareTrojan.Agent.FBHA
EmsisoftTrojan.Agent.FBHA (B)
DrWebTrojan.Inject4.6361
TrendMicroTROJ_GEN.R002C0RLQ20
McAfee-GW-EditionBehavesLike.Win32.Dropper.vz
SophosMal/Generic-R + Mal/EncPk-APV
JiangminTrojan.Banker.RTM.uo
MAXmalware (ai score=81)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/Qakbot.GA!MTB
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Agent.FBHA
ZoneAlarmTrojan-Banker.Win32.RTM.hgz
GDataTrojan.Agent.FBHA
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R360772
McAfeeGenericRXND-US!109C53CC0AC1
VBA32Trojan.Inject
MalwarebytesTrojan.Crypt
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HIKT
TrendMicro-HouseCallTROJ_GEN.R002C0RLQ20
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.HDNN!tr
BitDefenderThetaGen:NN.ZedlaF.34700.GM4@aeq8R6yi
AVGWin32:BankerX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.732

How to remove Trojan.Agent.FBHA?

Trojan.Agent.FBHA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment