Trojan

How to remove “Trojan.Win32.Fsysna.diob”?

Malware Removal

The Trojan.Win32.Fsysna.diob is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Fsysna.diob virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Attempts to modify desktop wallpaper
  • Behavioural detection: Injection (inter-process)
  • Behavioural detection: Injection with CreateRemoteThread in a remote process
  • Created a process from a suspicious location

How to determine Trojan.Win32.Fsysna.diob?


File Info:

name: 7EFCA937671881FE6431.mlw
path: /opt/CAPEv2/storage/binaries/c1dea8dc3d24200d30261639d5637550c2306ff6bd05bf6d07cc1ca49eda5dc6
crc32: 3E0B8DC5
md5: 7efca937671881fe6431f7a6baad02ca
sha1: 888c34b787d064a54cac5ddcea8d6a34256c3606
sha256: c1dea8dc3d24200d30261639d5637550c2306ff6bd05bf6d07cc1ca49eda5dc6
sha512: e7910eb41ab8447f17f92d3a7a0f9061f493326c0403261d7aa58b94e3c04d6260d9018eb7a97691c0249bfce0a44cd1ff0aa8a15ed8a33f1984eec8377473f3
ssdeep: 24576:j4lavt0LkLL9IMixoEgeaptyO4q9MmCS:2kwkn9IMHeaptyLaPCS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A315AE0373DDC3A1C3725273BA65BB01AEBB7C2506A1F59B2FD9093DE920162521E673
sha3_384: 1a079d4b334282829f840c9e4042559a024495e728d7c476bea58d9fabde8fb6f671c80d4549c2ba359b4dc19ccbe576
ep_bytes: e897cf0000e97ffeffffcccccccccccc
timestamp: 2021-12-08 23:46:44

Version Info:

Translation: 0x0809 0x04b0

Trojan.Win32.Fsysna.diob also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.Click3.8144
MicroWorld-eScanAIT:Trojan.Autoit.CLU
ALYacAIT:Trojan.Autoit.CLU
MalwarebytesBackdoor.Bladabindi
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderThetaAI:Packer.E952DB6B15
CyrenW32/AutoIt.EZ.gen!Eldorado
ESET-NOD32multiple detections
KasperskyTrojan.Win32.Fsysna.diob
BitDefenderAIT:Trojan.Autoit.CLU
Ad-AwareAIT:Trojan.Autoit.CLU
EmsisoftAIT:Trojan.Autoit.CLU (B)
BaiduWin32.Trojan-Dropper.Autoit.l
FireEyeGeneric.mg.7efca937671881fe
SophosML/PE-A
IkarusTrojan.Win32.Tiny
AviraDR/AutoIt.Gen
Antiy-AVLTrojan/Generic.ASCommon.168
ArcabitAIT:Trojan.Autoit.CLU
GDataAIT:Trojan.Autoit.CLU (2x)
CynetMalicious (score: 100)
McAfeeTrojan-AutoIt.h
MAXmalware (ai score=81)
CylanceUnsafe
APEXMalicious
eGambitUnsafe.AI_Score_75%
FortinetW32/CoinMiner.AGV!tr
AVGWin32:GenMalicious-AGV [Trj]
Cybereasonmalicious.767188
AvastWin32:GenMalicious-AGV [Trj]

How to remove Trojan.Win32.Fsysna.diob?

Trojan.Win32.Fsysna.diob removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment