Trojan

Trojan.Agent.FPMF (file analysis)

Malware Removal

The Trojan.Agent.FPMF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.FPMF virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Agent.FPMF?


File Info:

name: 9007AD1B4676AB387AC2.mlw
path: /opt/CAPEv2/storage/binaries/c2315f44d01019f026da2ecf8b4851ffe4ecb3a702c234da585f375a6e16a38e
crc32: D9B40043
md5: 9007ad1b4676ab387ac2b58e3aa15916
sha1: 4f5139c2877f2daffcb5f0b592bb3d176ac70b90
sha256: c2315f44d01019f026da2ecf8b4851ffe4ecb3a702c234da585f375a6e16a38e
sha512: 244f0fdf837d868f41786f8be524526a80e122361963012a88eb55b42c195e15bfb95acc2fbee9a346fa9a53a6f9ee9badc8cf9d64e0317397ebe0fc202088b6
ssdeep: 3072:1KtfDwsjPThTYa1DH2f+KtfDwsjPThTYszDH2f:stfDwsjPThTD1L2ltfDwsjPThT5zL2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE649E57FA91C872C0281DFC9D19C2D5F7BB76702E1A0962B9FAAF4CDC2A2D2151C247
sha3_384: b5359fabff13ad418b2445b9a14e9769fb4b653943a8f805b315917d0ba1b6bef738eb31a5a9e58a1cf70446f3d45852
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan.Agent.FPMF also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.FPMF
FireEyeGeneric.mg.9007ad1b4676ab38
CAT-QuickHealTrojan.Viking.M6
ALYacTrojan.Agent.FPMF
CylanceUnsafe
ZillyaTrojan.Lmir.Win32.11071
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitTrojan.Agent.FPMF
BaiduWin32.Virus.Agent.s
CyrenW32/Legendmir.P.gen!Eldorado
SymantecW32.Looked.F
ESET-NOD32Win32/PSW.Legendmir.XE
APEXMalicious
ClamAVWin.Trojan.Delf-1564
KasperskyTrojan-GameThief.Win32.Lmir.xe
BitDefenderTrojan.Agent.FPMF
NANO-AntivirusTrojan.Win32.Lmir.kjsx
AvastWin32:Lmir-FX [Trj]
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazruF/gAbXLnXvVHsPopv9R2)
Ad-AwareTrojan.Agent.FPMF
TACHYONTrojan-PWS/W32.Lmir.319488
SophosML/PE-A + Mal/Behav-419
ComodoHeur.Corrupt.PE@1z141z3
DrWebWin32.HLLW.Lant
VIPREVirus.Win32.Viking.ms (v)
TrendMicroTROJ_LEMIR.T
EmsisoftTrojan.Agent.FPMF (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.LMir.id
AviraW32/Lemir.Dll.1
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASBOL.B8DE
MicrosoftVirus:Win32/Viking.MS.dam#1
GDataTrojan.Agent.FPMF
CynetMalicious (score: 100)
AhnLab-V3Backdoor/Win32.Hupigon.C83485
MAXmalware (ai score=88)
VBA32TrojanPSW.Lmir
MalwarebytesSpyware.PasswordStealer
TrendMicro-HouseCallTROJ_LEMIR.T
TencentTrojan.Win32.BitCoinMiner.la
YandexTrojan.GenAsa!YaW/VrU/KAE
IkarusTrojan-Downloader.Win32.Delf
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Legendmir.XE!tr
BitDefenderThetaAI:Packer.DCD448341F
AVGWin32:Lmir-FX [Trj]

How to remove Trojan.Agent.FPMF?

Trojan.Agent.FPMF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment