How to remove “Trojan.Agent.FDMR”?

The Trojan.Agent.FDMR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.FDMR virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Collects information about installed applications

How to determine Trojan.Agent.FDMR?


File Info:
crc32: 5FC3FAD8
md5: cb4f8ed5e8c78cce92c7dae52790f05b
name: CB4F8ED5E8C78CCE92C7DAE52790F05B.mlw
sha1: d88b318f1e80b18cb0b8bccb4c0074619e43b930
sha256: 6b81a2465f8addb72bdf4c947638430d936223ef14c324c09a67ac42ac4250a8
sha512: 719437571e01e51134395bec2918821801573f80ee961e539a6094ecc90ba78cdc98b6df128aa5c830dfa1dccb5a68e17615cc71b695cee639dd96cc8aeefdca
ssdeep: 3072:4Z/Aq5HJv6rBXHdH1iF3P74buGdSg4GeLfqMsnwXB:4bRQBXHtq3PUbt3te7Bsn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2004
MIMEType: application/x-java-applet;version=1.4.2|application/x-java-bean;version=1.4.2|application/x-java-applet;version=1.5|application/x-java-bean;version=1.5
FileExtents: |||
FileVersion: 4.5.65.5
Full Version: 4.5.6_55-b00
FileOpenName: Java Applet|JavaBeans|Java Applet|JavaBeans
InternalName: Hshs(HL) Hath-rw
ProductName: Hshs(HL) 2 Thrrwehb Matwrynl Pdeaaty 5.0 Urdate 6
CompanyName: Sun Microsystems, Inc.
ProductVersion: 4.5.65.5
FileDescription: Java Plug-in 1.5.0_06 for Netscape Navigator (DLL Helper)
OriginalFilename: HSHsth14.dll
Translation: 0x0409 0x04e4

Trojan.Agent.FDMR also known as:

Bkav	W32.AIDetectGBM.malware.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.FDMR
FireEye	Generic.mg.cb4f8ed5e8c78cce
Malwarebytes	Malware.Heuristic.1001
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/EmotetedCryptc.180910
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Dridex.AU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Trojan.Agent.FDMR
Paloalto	generic.ml
ViRobot	Trojan.Win32.Z.Agent.188416.CMD
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Trojan.Agent.FDMR
Sophos	ML/PE-A + Mal/EncPk-APX
VIPRE	Win32.Malware!Drop
TrendMicro	TrojanSpy.Win32.DRIDEX.THBBCBA
Emsisoft	Trojan.Agent.FDMR (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Agent.gkttr
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Trojan.Win32.Banker.oa!s1
Arcabit	Trojan.Agent.FDMR
AegisLab	Trojan.Win32.Fdmr.4!c
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Reputation.C4345428
BitDefenderTheta	Gen:NN.ZedlaF.34590.lu8@auFCTOpP
ALYac	Trojan.Agent.FDMR
TACHYON	Trojan/W32.Agent.188416.BNF
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Kryptik.HHTV
TrendMicro-HouseCall	TrojanSpy.Win32.DRIDEX.THBBCBA
MAX	malware (ai score=99)
Fortinet	W32/Kryptik.HJBH!tr
AVG	Win32:BankerX-gen [Trj]
Qihoo-360	Win32/TrojanPSW.Generic.HgkASPkA

How to remove Trojan.Agent.FDMR?

Trojan.Agent.FDMR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X