Trojan

Should I remove “Trojan:Win32/Fuery.ASN!MTB”?

Malware Removal

The Trojan:Win32/Fuery.ASN!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Fuery.ASN!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Fuery.ASN!MTB?



File Info:

name: 683B3BAB3D22CE295F13.mlw
path: /opt/CAPEv2/storage/binaries/bded242bfdc91225b8608eeda2cce39ca97b3c2c7d3a4c38602576b65fb1e7f5
crc32: 79A221FF
md5: 683b3bab3d22ce295f13b801fab8fd35
sha1: 72b7ffab76280ae4f37628c3cc2a7878643c16f2
sha256: bded242bfdc91225b8608eeda2cce39ca97b3c2c7d3a4c38602576b65fb1e7f5
sha512: ca3fddda1ef3bf2b0fbb3590f372d458410c18598c5eee8714000d270ef06cf0bf88e0d65b519a1bea6c9e82be300fb080b943345c3388ca4a88b1485a36f140
ssdeep: 24576:LcoXvzOopJvUCJ2pnyqii8Y39Wr17jEDICX0MLmJMPX6usOL:IoXvzPpVrJ2pnyqii8YNWZEDICX0MLmI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19655D05A2A9348A1FE45C2348B9BD3B384960C727EAD1C3B68567B31E5349F2C53F1C6
sha3_384: 4b01fd6aa1f5430f2612b664fb90ac5166f8e2739993ad0e1fe8d3063d5a94894f6acacea7852830c219436954a4044e
ep_bytes: e839600000e979feffffcccccccccccc
timestamp: 2014-03-11 10:54:23


Version Info:

CompanyName: Tencent
FileDescription: TASLogin Application
FileVersion: 2, 0, 27, 13735
InternalName: TASLogin
LegalCopyright: Copyright (C) 2012
ProductName: TASLogin Application
ProductVersion: 2, 0, 27, 13735
SpecialBuild: st
Comments: 2014-03-10
Translation: 0x0804 0x04b0

Trojan:Win32/Fuery.ASN!MTB also known as:

BkavW32.Common.801D5CA2
LionicTrojan.Win32.ShellCode.3!c
tehtrisGeneric.Malware
DrWebWin32.HLLP.Siggen.54
MicroWorld-eScanTrojan.GenericKDZ.98311
FireEyeGeneric.mg.683b3bab3d22ce29
SkyhighBehavesLike.Win32.Generic.tc
McAfeePacked-FAQ!683B3BAB3D22
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.GenericKDZ.98311
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0015dce31 )
BitDefenderTrojan.GenericKDZ.98311
K7GWTrojan ( 0015dce31 )
Cybereasonmalicious.b76280
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Patched.IW
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Generic-9864088-0
KasperskyHEUR:Exploit.Win32.ShellCode.gen
AlibabaVirus:Win32/Obfuscated.1062
RisingTrojan.Patch!1.B0CA (CLASSIC)
SophosTroj/Patched-BS
F-SecureTrojan.TR/Patched.Ren.Gen
ZillyaTrojan.GenericKD.Win32.43907
TrendMicroTROJ_GEN.R002C0DKC23
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKDZ.98311 (B)
SentinelOneStatic AI – Malicious PE
VaristW32/Patched.FI.gen!Eldorado
AviraTR/Patched.Ren.Gen
MAXmalware (ai score=80)
Antiy-AVLGrayWare/Win32.Patched.bak
Kingsoftmalware.kb.a.851
MicrosoftTrojan:Win32/Fuery.ASN!MTB
XcitiumHeur.Corrupt.PE@1z141z3
ArcabitTrojan.Generic.D18007
ZoneAlarmHEUR:Exploit.Win32.ShellCode.gen
GDataTrojan.GenericKDZ.98311
GoogleDetected
VBA32BScope.Trojan.Fuery
ALYacTrojan.GenericKDZ.98311
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DKC23
TencentTrojan.Win32.Bingoml.yb
IkarusTrojan.Win32.Patched
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Patched.IW!tr
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/Fuery.ASN!MTB?

Trojan:Win32/Fuery.ASN!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment