What is “Trojan.Agent.FMBY”?

The Trojan.Agent.FMBY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.FMBY virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan.Agent.FMBY?


File Info:
crc32: F91F011A
md5: eda9c0f50d134a2f685620507542d877
name: EDA9C0F50D134A2F685620507542D877.mlw
sha1: f828dc5d314ecd84505af09935de8a46e49fb869
sha256: 003ecbee9386ab26c2d614ab61f60b13cf32c1551aa9efc0f6bd455421327fe4
sha512: 53c3500e2b113ef27d18cb23cd058983973a9c7e5d3f6c1853d4b88c2d74dbc6b97e8b08780d1046141433f0151c05004b4db17c9ddeb44182cfd777fc3a44b8
ssdeep: 12288:e4ZZvOqQ/h9mBdaBh1HzcU+BVAH6No/lqSPuCKDbm0B9SJ/sneBLwBV7dxW0Ri9:fZZvOqQ/h9mBEX1HzTcVAHqo9qSPwsL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: brt
Assembly Version: 3.3.2.3
InternalName: eRaw.exe
FileVersion: 4.4.3.2
CompanyName: adobe
LegalTrademarks: ico
Comments: pdf
ProductName: iou
ProductVersion: 4.4.3.2
FileDescription: hu
OriginalFilename: eRaw.exe

Trojan.Agent.FMBY also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.KillProc2.16570
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/starter.ali1000139
Cyren	W32/MSIL_Troj.BIT.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	MSIL/Spy.Agent.AES
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.NanoBot.gen
BitDefender	Trojan.Agent.FMBY
MicroWorld-eScan	Trojan.Agent.FMBY
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.Agent.FMBY
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34104.Xm0@aOAFPri
FireEye	Generic.mg.eda9c0f50d134a2f
Emsisoft	Trojan.Agent.FMBY (B)
Webroot	W32.Trojan.Agent.Gen
eGambit	Unsafe.AI_Score_100%
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/AgentTesla!ml
ZoneAlarm	HEUR:Backdoor.MSIL.NanoBot.gen
GData	MSIL.Trojan-Stealer.AgentTesla.87RR2S
VBA32	CIL.HeapOverride.Heur
MAX	malware (ai score=99)
TrendMicro-HouseCall	TROJ_GEN.F0D1C00HP21
Yandex	Trojan.Slntscn24.bWfT6q
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Kryptik.ACOG!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan.Agent.FMBY?

Trojan.Agent.FMBY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X