About "Trojan:Win32/FormBook.AG!MTB" infection

The Trojan:Win32/FormBook.AG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/FormBook.AG!MTB virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/FormBook.AG!MTB?


File Info:
crc32: E6EC6C4B
md5: 478b258b192ea288c15fb785c7fe4cc1
name: bionomypetr.jpg
sha1: 043a9920bc8d1e44de6c204ad44c5a7a502204f8
sha256: eedb5c5f42372bec5fbca2a84f3a7421fa383701a2a4d743b7502a71a2afb758
sha512: e037fe3be5dd84a9fd4e52a143671c4cd046c1387c5615df15556d1d4fb6ec2da9d1ca6d5e2c69f2ac933f7e56893c37d61a39f35eefde7d4a21124fa889388c
ssdeep: 768:V5x1odTmQc66KMXRbaaCRPbjYpJkFx8gpSeon/HKqyFQpg0o+Ujyax2+ROL4S5Q:V2QUzMX9azTqJXbgeon
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Precentori
InternalName: bionomypetr
FileVersion: 1.00
CompanyName: Originalsproga8
LegalTrademarks: Selvsty8
Comments: Krakelerin7
ProductName: Preceram
ProductVersion: 1.00
FileDescription: neognathou
OriginalFilename: bionomypetr.exe

Trojan:Win32/FormBook.AG!MTB also known as:

MicroWorld-eScan	Trojan.Agent.EMYU
Qihoo-360	Win32/Trojan.Spy.259
McAfee	Fareit-FRP!478B258B192E
Cylance	Unsafe
AegisLab	Trojan.Win32.Noon.l!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005621711 )
BitDefender	Trojan.Agent.EMYU
K7GW	Trojan ( 005621711 )
F-Prot	W32/VBKrypt.AFK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
GData	Trojan.Agent.EMYU
Kaspersky	Trojan-Spy.Win32.Noon.avyx
Alibaba	TrojanSpy:Win32/Injector.dabcc5bc
NANO-Antivirus	Trojan.Win32.Noon.hetgxp
Tencent	Win32.Trojan-spy.Noon.Pdmp
Emsisoft	Trojan.Agent.EMYU (B)
F-Secure	Trojan.TR/AD.VBCryptor.vezgg
TrendMicro	TROJ_GEN.R011C0DCB20
McAfee-GW-Edition	Fareit-FRP!478B258B192E
Trapmine	suspicious.low.ml.score
Sophos	Mal/FareitVB-W
Cyren	W32/Trojan.NQZC-2983
Jiangmin	TrojanSpy.Noon.olc
Avira	TR/AD.VBCryptor.vezgg
MAX	malware (ai score=83)
Antiy-AVL	Trojan[Spy]/Win32.Noon
Arcabit	Trojan.Agent.EMYU
ZoneAlarm	Trojan-Spy.Win32.Noon.avyx
Microsoft	Trojan:Win32/FormBook.AG!MTB
VBA32	BScope.Trojan.Sonbokli
ALYac	Spyware.Noon.gen
Ad-Aware	Trojan.Agent.EMYU
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.EKYU
TrendMicro-HouseCall	TROJ_GEN.R011C0DCB20
Rising	Spyware.Noon!8.E7C9 (CLOUD)
Ikarus	Trojan-Spy.Keylogger.AgentTesla
eGambit	Unsafe.AI_Score_97%
Fortinet	W32/Injector.ELAK!tr
BitDefenderTheta	Gen:NN.ZevbaCO.34100.fm0@ayvFw4ii
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Trojan:Win32/FormBook.AG!MTB?

Trojan:Win32/FormBook.AG!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan:Win32/FormBook.AG!MTB” infection