Trojan.Agent.FGKS malicious file

The Trojan.Agent.FGKS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.FGKS virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid

How to determine Trojan.Agent.FGKS?

File Info:
name: 839CC66823D8239BBFE0.mlw
path: /opt/CAPEv2/storage/binaries/e866f34f671bbeddf425b380526289965da0d9b8fad183067ba5d2921067f78c
crc32: AC38E8F9
md5: 839cc66823d8239bbfe0392aefb9ace9
sha1: 7c2adf8199f3aa950914504c6d86f6d997e0ae1f
sha256: e866f34f671bbeddf425b380526289965da0d9b8fad183067ba5d2921067f78c
sha512: 8de9e62dd349f6f68406a6478ad642864a018c0b99c0ca60fa1321d5f1bfb195e4cf0549f6b0d62d62dad4f458be52bb0cca76912a2f4e4346d5c33dcfc00acd
ssdeep: 3072:dLeYuefaK9P2FjBXeokd0sYpIlbWf0tx3BdxGoQFejgpZLetdCnaMkl4w:NeYul0uzLUYzqxbfc6o1nTy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19BE3F1F7A3B60950C16BDC3B71979BBCFBB5842BC6F682C504634E0689F81911DA4273
sha3_384: 5d7302478a9f62fe9a0008f997d4102d996aba51e098432f4f361097ad08081f6054ecedeac132daab4529f7d10fde6f
ep_bytes: 60be15f070008dbeeb1fcfff57eb0b90
timestamp: 2007-02-19 09:07:54

Version Info:
CompanyName: Odbmbhnv Fliyqw
FileDescription: Odbmbhnv Tpdywvvckv Rlfqm
FileVersion: 16, 91, 63, 27
InternalName: Odbmbhnv
LegalCopyright: Copyright © Odbmbhnv Fliyqw 1999-2005
OriginalFilename: Odbmbhnv.exe
ProductName: Odbmbhnv Tpdywvvckv Rlfqm
ProductVersion: 41, 20, 80, 13
Translation: 0x0409 0x04e4

Trojan.Agent.FGKS also known as:

How to remove Trojan.Agent.FGKS?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.