What is “Trojan.Agent.FNJS”?

The Trojan.Agent.FNJS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.FNJS virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.

How to determine Trojan.Agent.FNJS?


File Info:
crc32: 2E3DCE35
md5: 9f9170d28c677db45ca2f70ac4978dfd
name: 9F9170D28C677DB45CA2F70AC4978DFD.mlw
sha1: c0d6310c5acb63d928c5baa632cc1255ec8e8ed1
sha256: d5841612d37dc3f713e02b4ae2e71266aa504741f17891445a699a27bb32d0d1
sha512: c8f1b346b79f7c184b3357e0f814d09fb74943ae478dd4da529f44d5839b448289275bd3497845255018087a4311afdb4290e849017da659e7c45cad4cc3e4d7
ssdeep: 12288:cbVMh0tRyr3W3SvniM+uwkMx8nXoTT0WJZmo:WMh0tRyL3lY8X2xJZmo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1998
InternalName: HistogramTest
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: HistogramTest Application
ProductVersion: 1, 0, 0, 1
FileDescription: HistogramTest MFC Application
OriginalFilename: HistogramTest.EXE
Translation: 0x0409 0x04b0

Trojan.Agent.FNJS also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Trickpak.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.KillProc2.16671
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.FNJS
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrickBot.CR
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
ClamAV	Win.Trojan.Trickbot-9896742-0
Kaspersky	HEUR:Trojan.Win32.Trickpak.gen
BitDefender	Trojan.Agent.FNJS
ViRobot	Trojan.Win32.Z.Trickbot.528443.A
MicroWorld-eScan	Trojan.Agent.FNJS
Ad-Aware	Trojan.Agent.FNJS
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Emotet.hc
FireEye	Generic.mg.9f9170d28c677db4
Emsisoft	Trojan.Agent.FNJS (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/TrickBot.ojetd
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Trickbot.EK!MTB
Gridinsoft	Trojan.Win32.Gen.vl!n
Arcabit	Trojan.Agent.FNJS
GData	Trojan.Agent.FNJS
AhnLab-V3	Trojan/Win.Trickbot.R442752
McAfee	GenericRXAA-AA!9F9170D28C67
MAX	malware (ai score=84)
Malwarebytes	Trojan.TrickBot
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TrojanSpy.Win32.TRICKBOT.YXBIYZ
Rising	Trojan.Generic@ML.83 (RDML:+MNsvCrCQTzdGWBCH7l+Kw)
Yandex	Trojan.Trickpak!MeETEx9GQ5w
Ikarus	Trojan.Win32.Trickbot
Fortinet	W32/Trickpak.CR!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan.Agent.FNJS?

Trojan.Agent.FNJS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X