Trojan.GenericFCA.Agent.117970 removal tips

The Trojan.GenericFCA.Agent.117970 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.GenericFCA.Agent.117970 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan.GenericFCA.Agent.117970?


File Info:
name: B545BC3970FDFDFFEA0C.mlw
path: /opt/CAPEv2/storage/binaries/959c11382b13be5f27f3c6f4cafc55bcd3b4429495eca78dfee16e0b2160f63f
crc32: CBDB4D6B
md5: b545bc3970fdfdffea0c76ef313a7369
sha1: ca94272f0a6da15d129d95af057f451ac260f5f1
sha256: 959c11382b13be5f27f3c6f4cafc55bcd3b4429495eca78dfee16e0b2160f63f
sha512: 7469aede593c9e1dc461e0de435a01781ecd2cd6886d0b43cec4120ba6f86316bb29712eae70cb707728cb0fa710bd2eaa186b25d62c9732df57fdd41997a9a4
ssdeep: 768:sMS+zkPFhclC0OoPwxgsZDz7HJ75pgsW7:sA0wlCrz/HJFpgsW7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F5538E27A9CCF178C1484E73357AD2FE46AB5E12360EA94373617B4F25B4171AF32226
sha3_384: 2cf8689068cbe6898d7efc9ecb894ff9e04349679fdaf8e7c1026d98d6e9c068b80dd7a34b3842af09ac977263bbf9d4
ep_bytes: e87c040000e936fdffff8bff558bec81
timestamp: 2024-03-10 09:41:36

Version Info:
0: [No Data]

Trojan.GenericFCA.Agent.117970 also known as:

Lionic	Trojan.Win32.Zapchast.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericFCA.Agent.117970
FireEye	Generic.mg.b545bc3970fdfdff
Sangfor	Trojan.Win32.Agent.Vmyv
CrowdStrike	win/malicious_confidence_100% (W)
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.HOE
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Zapchast.gen
BitDefender	Trojan.GenericFCA.Agent.117970
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.RunShell_l.16001142
Emsisoft	Trojan.GenericFCA.Agent.117970 (B)
F-Secure	Heuristic.HEUR/AGEN.1353015
MAX	malware (ai score=87)
Google	Detected
Avira	HEUR/AGEN.1353015
Antiy-AVL	Trojan/Win32.Zapchast
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.GenericFCA.Agent.D1CCD2
ZoneAlarm	HEUR:Trojan.Win32.Zapchast.gen
GData	Win32.Trojan.Agent.LMSRXH
Cynet	Malicious (score: 100)
Rising	Trojan.Generic@AI.100 (RDML:Y7RcZjP0Jou69RREHJ9wcQ)
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.1473518.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.GenericFCA.Agent.117970?

Trojan.GenericFCA.Agent.117970 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X