Trojan.Agent.FFQF removal instruction

The Trojan.Agent.FFQF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.FFQF virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.

How to determine Trojan.Agent.FFQF?


File Info:
crc32: CFB90A59
md5: b4059ff7037aa8d498105298c9f16632
name: B4059FF7037AA8D498105298C9F16632.mlw
sha1: 681c6e3f134cc35fd618a81774d042190ed0bd57
sha256: 712d4bd385542c08b05430d084b56c3f3f02bee71cf0c777d5e54a8748a49185
sha512: 00fe413e3bb51a2b465e592b22c310cabbc4ec843c0ed27d771091141b1a4c4478fca6d236024f6b86ced85c00aaa16f387f38f6e6ae01a569e6c16e9150c12b
ssdeep: 3072:PA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:P3J256FBMO93IuAiywi4Y2Z
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Freeware
InternalName: ANSI32
FileVersion: 1.66
CompanyName: Jason Hood
Comments: http://ansicon.adoxa.vze.com/
ProductName: ANSICON
ProductVersion: 1.66
FileDescription: ANSI Console
OriginalFilename: ANSI32.dll
Translation: 0x0409 0x04b0

Trojan.Agent.FFQF also known as:

Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Dridex.CV.gen!Eldorado
Symantec	Packed.Generic.517
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Sdum.gen
BitDefender	Trojan.Agent.FFQF
MicroWorld-eScan	Trojan.Agent.FFQF
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZedlaF.34678.ju8@amATM5ci
McAfee-GW-Edition	BehavesLike.Win32.Drixed.cc
FireEye	Generic.mg.b4059ff7037aa8d4
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_98%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Program:Win32/Wacapew.C!ml
GData	Trojan.Agent.FFQF
McAfee	Drixed-FJX!B4059FF7037A
MAX	malware (ai score=82)
Malwarebytes	Trojan.Dridex
Rising	Malware.Undefined!8.C (RDMK:cmRtazpKDKvEnyfsFPr8w1x6oOWW)
Ikarus	Trojan-Banker.Dridex
MaxSecure	Adware.MultiPlug.OFDZ
Fortinet	W32/Dridex.A8D2!tr
AVG	Win32:BankerX-gen [Trj]
Qihoo-360	HEUR/QVM40.1.9A44.Malware.Gen

How to remove Trojan.Agent.FFQF?

Trojan.Agent.FFQF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X