Trojan.Agent.FGPZ (file analysis)

The Trojan.Agent.FGPZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.FGPZ virus can do?

Executable code extraction
Creates RWX memory
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Creates a hidden or system file
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.FGPZ?


File Info:
crc32: 70B8F45C
md5: a461281eb36ed17506445a1f62705098
name: A461281EB36ED17506445A1F62705098.mlw
sha1: cc75b650cafd0ad7bf1939cbbbea1cfcd5b5600c
sha256: f9d39dddd6ef2203d00790716aaa4d19b68c04f88309794dd0712f375fa742c6
sha512: c872bcfde8f551ba1b38787b8c9dc208b475d6b0bfe8fdb799dbde9dd919cafdaecee588eaf64fecc37cf7d9359766429850f7f0b3dee3d4137899809447b9d8
ssdeep: 12288:NymJLjgQUqiZTwa6vcUpO59Nu6FaLLCvtd:nJ3gQUPZ85kz5b2HC
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2016 Domass Corporation. All rights reserved
InternalName: smile.dll
FileVersion: 0.7.3.538
CompanyName: Domass
Comments: www.blowsong.ru
ProductName: Domass Me fruit
ProductVersion: 0.7.3.538
FileDescription: Me fruit
OriginalFilename: smile.dll
Translation: 0x0409 0x04b0

Trojan.Agent.FGPZ also known as:

Cynet	Malicious (score: 99)
ALYac	Trojan.Agent.FGPZ
K7GW	Spyware ( 0055de821 )
K7AntiVirus	Spyware ( 0055de821 )
Cyren	W32/Cridex.AK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Ursnif.BX
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Fgpz-9856721-0
Kaspersky	HEUR:Trojan-Banker.Win32.Cridex.gen
BitDefender	Trojan.Agent.FGPZ
MicroWorld-eScan	Trojan.Agent.FGPZ
Ad-Aware	Trojan.Agent.FGPZ
Sophos	Troj/Ursnif-EV
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Possible_SMHPQAKBOTTHA
McAfee-GW-Edition	Artemis!Virus
FireEye	Generic.mg.a461281eb36ed175
Emsisoft	Trojan.Agent.FGPZ (B)
Avira	TR/AD.UrsnifDropper.pdtmn
Microsoft	Trojan:Win32/Gozi.GS!MTB
GData	Trojan.Agent.FGPZ
AhnLab-V3	Trojan/Win.Possible_smhpqakbottha.R418307
McAfee	GenericRXOK-AT!A461281EB36E
MAX	malware (ai score=84)
VBA32	TrojanBanker.Cridex
Malwarebytes	Trojan.Crypt
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Possible_SMHPQAKBOTTHA
Rising	Trojan.Kryptik!8.8 (C64:YzY0OjoyHbgvcMKh)
Yandex	Trojan.Kryptik!mAUBIEf66EM
Fortinet	W32/Malicious_Behavior.VEX
AVG	Win32:Malware-gen

How to remove Trojan.Agent.FGPZ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Agent.FGPZ (file analysis)