Categories: Trojan

Win32/TrojanDownloader.Agent.FDD removal

The Win32/TrojanDownloader.Agent.FDD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.FDD virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings

Related domains:

softdatasetup.com

wpad.local-net

How to determine Win32/TrojanDownloader.Agent.FDD?


File Info:
name: 4A1289E81F0670C23782.mlwpath: /opt/CAPEv2/storage/binaries/68fe1873726724bf6825d80f19de11a04945d9ba3a20d38956ba815ab2502f2acrc32: 3A1D3792md5: 4a1289e81f0670c23782e5046024080csha1: d12e598532220509296feff9238aeb46bfd59cb5sha256: 68fe1873726724bf6825d80f19de11a04945d9ba3a20d38956ba815ab2502f2asha512: 0c735b22a89d34097459b5d4751a064c0c8e5cfb6e9d9d927d25c2235969e40b034fe2a0b4028f39450183cfd2fa581680be709c70c9528f741af3cdc10bffefssdeep: 98304:N/LeA2C07PY9Kg1NWSzoyxn+vnw/IH/YAw2xtith:UZCYtqQSzoU+fwAg9L/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10F16D0E370987C4DD0003537B62D40A254DFFF339DA193472AE4326A49F15A64EFAAE6sha3_384: a625d87c4bbc69c0e80733842980162180625d55caa029a5d7d65fc450d0f2ec167cd7db0a542fef6a177c68e1215fa3ep_bytes: e8c8790000e989feffff8bff558bec8btimestamp: 2019-11-23 11:11:52
Version Info:
FileDescription: HerbSuspectingFileVersion: 2.4.6.5InternalName: HerbSuspectingLegalCopyright: Copyright (C) 2019 METACHU LIMITEDOriginalFilename: HerbSuspectingProductName: HerbSuspectingProductVersion: 2.4.6.5Translation: 0x0409 0x04b0

Win32/TrojanDownloader.Agent.FDD also known as:

Lionic	Adware.Win32.Agent.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.GenericKD.47475360
FireEye	Adware.GenericKD.47475360
ALYac	Adware.GenericKD.47475360
Zillya	Downloader.Agent.Win32.419362
K7AntiVirus	Trojan-Downloader ( 0056899f1 )
Alibaba	AdWare:Win32/DropperX.c62ca1d4
K7GW	Trojan-Downloader ( 0056899f1 )
Cybereason	malicious.81f067
Cyren	W32/Agent.BXY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FDD
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Coinminer-9873209-0
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Agent.gen
BitDefender	Adware.GenericKD.47475360
NANO-Antivirus	Trojan.Win32.Drop.hzxrzy
Avast	Win32:AdwareSig [Adw]
Tencent	Win32.Trojan-downloader.Agent.Pbyw
Ad-Aware	Adware.GenericKD.47475360
Emsisoft	Application.Downloader (A)
DrWeb	Trojan.MulDrop9.38350
McAfee-GW-Edition	GenericRXMG-MX!4A1289E81F06
Sophos	Generic PUA NB (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.VAZJGF
Avira	HEUR/AGEN.1139223
Gridinsoft	Ransom.Win32.Gen.sa
Arcabit	Adware.Generic.D2D46AA0
Microsoft	PUADlManager:Win32/OpenDownloadManager
Cynet	Malicious (score: 99)
McAfee	GenericRXMG-MX!4A1289E81F06
MAX	malware (ai score=65)
VBA32	BScope.Trojan.Agent
Malwarebytes	Adware.SpecialSearchOffer
Rising	Trojan.Generic@ML.100 (RDML:Ip+OzwfnQHSrjRDYCAf1pA)
Fortinet	W32/Agent.FID!tr.dldr
AVG	Win32:AdwareSig [Adw]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)