Trojan

Should I remove “Trojan.Agent.FSZA”?

Malware Removal

The Trojan.Agent.FSZA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.FSZA virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Dynamic (imported) function loading detected
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan.Agent.FSZA?


File Info:

name: 68F46FACAE87DD898F28.mlw
path: /opt/CAPEv2/storage/binaries/38578ca29eacd01a334118a3c806ab238c31c86894f79bca1dcc4a3202a9bfc6
crc32: ED7C31D3
md5: 68f46facae87dd898f28995af0fa6587
sha1: 6e586ac43126fe2697f6cc83c985bb8894649ae3
sha256: 38578ca29eacd01a334118a3c806ab238c31c86894f79bca1dcc4a3202a9bfc6
sha512: a09010937079a4a1b9aa03006114e7dc4b2b8a7dd75e9586ed499612b630eb7f99af4660b2a2a9d276aa729dd77abefc2c1c61abeadcc2c08d85e94261223a84
ssdeep: 12288:uaHc64b888888888888W88888888888HjscV7TdjL47zdU5imXkT33rD+zG/oBin:F86+IW7uvmQSIezG/aYFkJR30F6rp8/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0F40213B7C30072F4615A358C6680049D677DBD09F460A62EFDEB4E4EBA7D68C7AB21
sha3_384: 76f12f730439c4ba4734833ff862b842e22689288a64fa62e6cb871758c69917f64420d3dc02a7bad8540121f5d7bb78
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2018-06-14 13:27:46

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription:
FileVersion: 81.142
LegalCopyright:
ProductName:
ProductVersion: 81.142
Translation: 0x0000 0x04b0

Trojan.Agent.FSZA also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Agentino.b!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.FSZA
FireEyeTrojan.Agent.FSZA
McAfeeArtemis!68F46FACAE87
CylanceUnsafe
SangforTrojan.Win32.Agentino.gen
K7AntiVirusTrojan ( 0058a2fc1 )
AlibabaTrojanDropper:Win32/Addrop.325f7340
K7GWTrojan ( 0058a2fc1 )
Cybereasonmalicious.43126f
CyrenW32/Addrop.D.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/TrojanDropper.Addrop.CH
TrendMicro-HouseCallTROJ_GEN.R002H0CB722
Paloaltogeneric.ml
ClamAVWin.Packed.Agentino-9863792-0
KasperskyHEUR:Trojan-Dropper.Win32.Agentino.gen
BitDefenderTrojan.Agent.FSZA
AvastFileRepMalware
TencentWin32.Trojan-dropper.Agentino.Wski
EmsisoftTrojan.Agent.FSZA (B)
McAfee-GW-EditionBehavesLike.Win32.Dropper.bc
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
JiangminTrojanDropper.Agentino.a
WebrootW32.AGentino
AviraTR/Crypt.XPACK.Gen8
MicrosoftTrojanDropper:Win32/Aicat.A!ml
GDataTrojan.Agent.FSZA
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.C4956704
MalwarebytesAdware.Dropper
RisingDownloader.TaskLoader/ARCHIVE!1.CDEA (CLASSIC)
YandexTrojan.DR.Addrop!OlVDDo+drto
FortinetW32/Addrop.CH!tr
AVGFileRepMalware

How to remove Trojan.Agent.FSZA?

Trojan.Agent.FSZA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment