Win32/TrojanDownloader.Agent.FNS removal

The Win32/TrojanDownloader.Agent.FNS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.FNS virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

pastebin.com

ocsp.digicert.com

1fichier.com

How to determine Win32/TrojanDownloader.Agent.FNS?


File Info:
crc32: 4858C790
md5: 05e702bccf1dfbf0429a7e4097ccabf5
name: 05E702BCCF1DFBF0429A7E4097CCABF5.mlw
sha1: 1ca158abbe395025ad40912c46c6dba0235fa544
sha256: 72c6ad0d31aa052c6133922fa701b7eb61abe5f8843c80be76022759fa253f8a
sha512: b8df3d9d4ce2de5d0b4dedd1b6a3d666653af9c22f2a14d0914b14261ad29dc4e604b421d249cc8ff16c39d173838832941955f81ff1ab102e0ccedc74f6be79
ssdeep: 49152:a9N26FOnzGn6LJvqkwnpC+mWd6uIcccbPi:a906FOznLo0+Dd6uxccba
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
ProductVersion: 9.1.0.0
ProductName: Setup
FileVersion: 9.1.0.0
OriginalFilename: suf_launch.exe
FileDescription: Setup Application
Translation: 0x0409 0x0000

Win32/TrojanDownloader.Agent.FNS also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36257496
FireEye	Trojan.GenericKD.36257496
McAfee	Artemis!05E702BCCF1D
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Adload.a!c
Sangfor	Trojan.Win32.Adload.scio
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.36257496
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Indiloadz.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Agent.FNS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Downloader.Win32.Adload.scio
Alibaba	TrojanDownloader:Win32/Adload.a0a0d2f5
Rising	Downloader.Adload!8.D1 (CLOUD)
Ad-Aware	Trojan.GenericKD.36257496
Zillya	Downloader.Adload.Win32.100296
TrendMicro	TROJ_GEN.R035C0WAU21
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vc
Emsisoft	Trojan.GenericKD.36257496 (B)
MAX	malware (ai score=86)
Microsoft	Trojan:Win32/Ymacco.AB72
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D2293ED8
AhnLab-V3	Malware/Win32.Generic.C4251457
ZoneAlarm	Trojan-Downloader.Win32.Adload.scio
GData	Trojan.GenericKD.36257496
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.36257496
Malwarebytes	Malware.AI.370984832
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R035C0WAU21
Tencent	Win32.Trojan-downloader.Adload.Hfj
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Indiloadz.CA!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Adware.AdLoad.HgIASN8A

How to remove Win32/TrojanDownloader.Agent.FNS?

Win32/TrojanDownloader.Agent.FNS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/TrojanDownloader.Agent.FNS removal