Trojan

Should I remove “Trojan.Agent.FHAD”?

Malware Removal

The Trojan.Agent.FHAD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.FHAD virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (3 unique times)
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.

Related domains:

ip.anysrc.net

How to determine Trojan.Agent.FHAD?


File Info:

crc32: 99A49E3D
md5: e955121e86d8189b27db7ad39d557dc8
name: E955121E86D8189B27DB7AD39D557DC8.mlw
sha1: 3e1a70fce06970f1a81cf2591458fb8e3caa6c90
sha256: b7566680077d72947a657cb6f43804befe4146e9dab443f4a662a20d186a5394
sha512: 9274d5904215077529ea4a951ac63b78fe53795d1bf6eeca048216e467fdf5cad9e4092ebb4b77cfb500769a0df4f00a60132edf9c0456aada5cf46fc68f91e3
ssdeep: 12288:3Y8Id8iWYsK3t3o4iek/WGtMqZtEfl4GnFfTWokO:i8i9r9pd9sMqTaRn1bk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2003 Hans Dietrich
FileVersion: 1, 2, 0, 1
ProductName: XGetoptTest
E-mail: hdietrich2@hotmail.com
ProductVersion: 1, 2, 0, 1
FileDescription: XGetoptTest.exe
OriginalFilename: XGetoptTest.exe
Translation: 0x0409 0x04b0

Trojan.Agent.FHAD also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderTrojan.Agent.FHAD
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FEYT
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Injector.gen
MicroWorld-eScanTrojan.Agent.FHAD
Ad-AwareTrojan.Agent.FHAD
SophosML/PE-A
McAfee-GW-EditionBehavesLike.Win32.Emotet.jh
FireEyeGeneric.mg.e955121e86d8189b
EmsisoftTrojan.Agent.FHAD (B)
eGambitUnsafe.AI_Score_55%
GridinsoftTrojan.Win32.Kryptik.dd!n
GDataTrojan.Agent.FHAD
MAXmalware (ai score=88)
RisingTrojan.Injector!8.C4 (C64:YzY0OrDfUzom+F9g)

How to remove Trojan.Agent.FHAD?

Trojan.Agent.FHAD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment