About “Trojan:Win32/Fuery.B!rfn” infection

The Trojan:Win32/Fuery.B!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Fuery.B!rfn virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Deletes executed files from disk
• Collects information to fingerprint the system
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Fuery.B!rfn?

File Info:
name: 839224819F47BDD639B3.mlw
path: /opt/CAPEv2/storage/binaries/d7258e6f1470a237714c9221378738f5bd419e55198e398cc7842450e8dddab0
crc32: 3BEE9BCE
md5: 839224819f47bdd639b3d198a2555708
sha1: 6b351928f7e722ce496597b8bbc6d79225fd7400
sha256: d7258e6f1470a237714c9221378738f5bd419e55198e398cc7842450e8dddab0
sha512: 0141165c0c5cf4ca4e729f4989c88273d56aef225251264121cab770ed64bdcf75068572adc7023343fa604bbcd49c2790484349908cf233f82be617d7d04367
ssdeep: 98304:/eBBcE2O1TRPj1g840VYtBZfaPQDK4BXtPziMi44NTBvjKB/vpoXvP:6Bn2O1TRPFO3a4DZ1YMiX1wmvP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A2563303FBC35439E828143498950224ED69BDA628D7007A2DF9F6DE627D18374B7EE7
sha3_384: c050bbddb90c542af669218428e229e9c35b60c0485e1bc454bcd81d8b0ee0aba959435d4089196a5baa8ed39b9e1269
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-07-09 13:41:29

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: ZiYuXuan Studio.                                            
FileDescription: DNGuard Trial Setup                                         
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: DNGuard Trial                                               
ProductVersion: v3.91               
Translation: 0x0000 0x04b0

Trojan:Win32/Fuery.B!rfn also known as:

How to remove Trojan:Win32/Fuery.B!rfn?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.