What is “Trojan.Agent.FQKM (B)”?

The Trojan.Agent.FQKM (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.FQKM (B) virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Agent.FQKM (B)?


File Info:
name: CA0E7DAE533E0FC00891.mlw
path: /opt/CAPEv2/storage/binaries/7dc9eaddbd4c4f8f5a98112f3f649ca51c28b9e8903741a5c13ffbf553e68ef0
crc32: 45C50BB2
md5: ca0e7dae533e0fc00891b7d30764f8db
sha1: 63800c15df10871116e24c0d2652f4c99d8c9e9d
sha256: 7dc9eaddbd4c4f8f5a98112f3f649ca51c28b9e8903741a5c13ffbf553e68ef0
sha512: f1f3a727a07ab8fe939c32721086c1ecde0eba3238bbef85c14b1b1ae577f1803c1f7e9e800cae3d733d951453e5f96f6e668332eaf3f7fd18930191ab00e540
ssdeep: 6144:61M6Zqh7zLnrmHowEm2+Jzf6WI5uOvOYOhODOXOYOzODOaOpOxO1O3OvOJO8O+Oy:67IwwWBw5C1VRXCbwt
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T133C45C13765880B3C45B32744E6FDAAADB35BD260F10ABA713887BFE1D353806D29275
sha3_384: dda63cbd8f1c25536b38045f0468750a791146a14eda9f73a9473271893141eb2ff518acaa086d2254d0e0198a76fe71
ep_bytes: 00000000000000000000000000000000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Agent.FQKM (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.FQKM
FireEye	Generic.mg.ca0e7dae533e0fc0
ALYac	Trojan.GenericKDZ.80905
Malwarebytes	Malware.AI.3696146603
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
BitDefender	Trojan.Agent.FQKM
K7GW	Riskware ( 00584baa1 )
Cybereason	malicious.e533e0
BitDefenderTheta	AI:Packer.DFF53E5D1C
Cyren	W64/Cerbu.AS.gen!Eldorado
APEX	Malicious
Alibaba	Virus:Win32/Blackie.36179aa9
Avast	Win64:Malware-gen
Rising	Worm.VB!1.DA41 (CLASSIC)
Sophos	Generic ML PUA (PUA)
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	BehavesLike.Win64.Generic.hh
Emsisoft	Trojan.Agent.FQKM (B)
Ikarus	Trojan.Dropper
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKDZ.80905
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Agent.R455895
McAfee	Artemis!CA0E7DAE533E
MAX	malware (ai score=83)
Cylance	Unsafe
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Trojan.Agent.FQKM (B)?

Trojan.Agent.FQKM (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X