Trojan

Win32/TrojanDownloader.Agent.FCI removal

Malware Removal

The Win32/TrojanDownloader.Agent.FCI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Agent.FCI virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/TrojanDownloader.Agent.FCI?


File Info:

crc32: 13FEE896
md5: 09fab9becf68069abb7b1fe7c103bb6b
name: az1.exe
sha1: 2785100dc2bd8ccd08d4423dfefda9642ef2052b
sha256: 430d597e783cbed6f74c12ce04f161be206c67030e0aff156997e079d71cf270
sha512: 4aa55cb97d86c2e12bb21d977b4f05c00193017d2d7969980760561ebec387dd904656498a69b24e709797425d66d11b9c46b2c2938ec75f84e9494c6800171b
ssdeep: 768:Nv/H4uhaqhCjp9JoF+F2BUIzVxVHPPcPozJeeWQYaYiw:6uhcKFk21ncPXdD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: paper
FileVersion: 2.08
CompanyName: Ti bSBer
ProductName: Almonage4
ProductVersion: 2.08
OriginalFilename: paper.exe

Win32/TrojanDownloader.Agent.FCI also known as:

MicroWorld-eScanTrojan.GenericKD.33762991
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
BitDefenderTrojan.GenericKD.33762991
F-ProtW32/VBKrypt.AJT.gen!Eldorado
APEXMalicious
GDataWin32.Trojan-Downloader.Dagurleo.IQ4V7G
KasperskyTrojan-PSW.Win32.Azorult.anki
TencentWin32.Trojan-qqpass.Qqrob.Jcs
Ad-AwareTrojan.GenericKD.33762991
EmsisoftTrojan.GenericKD.33762991 (B)
ComodoMalware@#12u5lsnjeupjs
F-SecureTrojan.TR/Dldr.Agent.ghxnk
McAfee-GW-EditionRDN/Generic.grp
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.09fab9becf68069a
IkarusTrojan-Downloader.Win32.Agent
CyrenW32/VBKrypt.AJT.gen!Eldorado
AviraTR/Dldr.Agent.ghxnk
eGambitUnsafe.AI_Score_99%
MAXmalware (ai score=82)
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D2032EAF
ZoneAlarmTrojan-PSW.Win32.Azorult.anki
MicrosoftTrojan:Win32/Azorult!ibt
McAfeeRDN/Generic.grp
MalwarebytesTrojan.GuLoader
PandaTrj/GdSda.A
ESET-NOD32Win32/TrojanDownloader.Agent.FCI
FortinetW32/GuLoader.VHIQ!tr
BitDefenderThetaGen:NN.ZevbaCO.34108.fm0@aO0VdZli
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Win32/TrojanDownloader.Agent.FCI?

Win32/TrojanDownloader.Agent.FCI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment