Categories: SpyTrojan

Should I remove “TrojanSpy:Win32/Fucobha.A”?

The TrojanSpy:Win32/Fucobha.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanSpy:Win32/Fucobha.A virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine TrojanSpy:Win32/Fucobha.A?


File Info:

name: FBA7B9FFD08110E37D2B.mlwpath: /opt/CAPEv2/storage/binaries/993e6d59835a196cc715d279674151c8856843250ea1018498d20d4935a5d19ccrc32: 8C083D75md5: fba7b9ffd08110e37d2bdf77c0d8b806sha1: 1a267b0af03d4e4fd84bee34bee2452b592597cesha256: 993e6d59835a196cc715d279674151c8856843250ea1018498d20d4935a5d19csha512: 48c3879c79b4a8147295329ad678a9441810bd01ac2c993342d8ec426507080e3981adeabb5b986bb8e69f0e074b7450e6bce7edf77301b6e221ea9caf36f80assdeep: 1536:G3lOFnV98szKufcY4PtDnt8mGcKgbrJqmkvxFoEF4WjcXJNrBkPZeEwLztj0A:GIVmlufIrtfhZ6oEC2yAkEwXtj0type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16EC37D123591C0B7C84A417A542ECB02A77B75515FFAC5437FA60BCEAEE12D0A73B346sha3_384: b4088f6964e6da9c6009a93a404e18deff70db16daff3784d014a9d2c3a65a0877a00035e98bd35ed4b789823626d8e8ep_bytes: e83d2b0000e940feffffb808c04000c3timestamp: 2013-02-04 08:13:52

Version Info:

0: [No Data]

TrojanSpy:Win32/Fucobha.A also known as:

Lionic Trojan.Win32.Icefog.m!c
DrWeb Trojan.DownLoader7.61743
MicroWorld-eScan Gen:Variant.Cerbu.99550
FireEye Generic.mg.fba7b9ffd08110e3
McAfee Artemis!FBA7B9FFD081
Cylance Unsafe
VIPRE Gen:Variant.Cerbu.99550
Sangfor Backdoor.Win32.Icefog.ulxpg
K7AntiVirus Trojan ( 004e73e41 )
Alibaba Backdoor:Win32/Fucobha.18d140cd
K7GW Trojan ( 004e73e41 )
Cybereason malicious.fd0811
BitDefenderTheta Gen:NN.ZexaF.34592.hqW@aqrg7Ljb
Symantec Backdoor.Hormesu!gen2
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Fucobha.A
APEX Malicious
TrendMicro-HouseCall BKDR_FUCOBHA.AX
Paloalto generic.ml
ClamAV Win.Trojan.Agent-7117994-0
Kaspersky Backdoor.Win32.Icefog.ak
BitDefender Gen:Variant.Cerbu.99550
NANO-Antivirus Trojan.Win32.Agent.bgpizd
Avast Win32:Fucobha-A [Trj]
Tencent Malware.Win32.Gencirc.114b9585
Ad-Aware Gen:Variant.Cerbu.99550
Sophos Mal/Generic-R
Comodo Malware@#axp36dybkrym
Zillya Backdoor.Icefog.Win32.8
TrendMicro BKDR_FUCOBHA.AX
McAfee-GW-Edition BehavesLike.Win32.PWSZbot.ch
Trapmine malicious.moderate.ml.score
Emsisoft Gen:Variant.Cerbu.99550 (B)
SentinelOne Static AI – Suspicious PE
Jiangmin TrojanDownloader.Agent.ekdn
Google Detected
Avira TR/Spy.Fucobha.A.23
MAX malware (ai score=94)
Antiy-AVL Trojan/Generic.ASMalwS.13
Kingsoft Win32.Troj.Undef.(kcloud)
Microsoft TrojanSpy:Win32/Fucobha.A
ViRobot Trojan.Win32.A.Downloader.128000.CB
GData Gen:Variant.Cerbu.99550
Cynet Malicious (score: 100)
AhnLab-V3 Backdoor/Win32.Icefog.R83653
VBA32 TrojanDownloader.Agent
ALYac Gen:Variant.Cerbu.99550
TACHYON Trojan/W32.Agent.127488.SB
Malwarebytes Malware.AI.3661036933
Rising Trojan.Generic@AI.88 (RDML:vw0Lxyoms8jEH8VzVJbDpw)
Yandex Trojan.GenAsa!prNldzNn+Ns
Ikarus Trojan-Spy.Win32.Fucobha
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Agent.B!tr.dldr
AVG Win32:Fucobha-A [Trj]
Panda Trj/CI.A
CrowdStrike win/malicious_confidence_100% (W)

How to remove TrojanSpy:Win32/Fucobha.A?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Trojan.Generic.35266640 malicious file

The Trojan.Generic.35266640 is considered dangerous by lots of security experts. When this infection is active,…

2 seconds ago

Should I remove “TrojanDownloader:Win32/Beebone.AC”?

The TrojanDownloader:Win32/Beebone.AC is considered dangerous by lots of security experts. When this infection is active,…

33 seconds ago

Mal/Swizzor-B removal tips

The Mal/Swizzor-B is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

Adware.Hotbar.1 information

The Adware.Hotbar.1 is considered dangerous by lots of security experts. When this infection is active,…

11 mins ago

Barys.456554 information

The Barys.456554 is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago

Midie.66060 (file analysis)

The Midie.66060 is considered dangerous by lots of security experts. When this infection is active,…

36 mins ago