Categories: Trojan

Win32/TrojanDownloader.Agent.FNS removal

The Win32/TrojanDownloader.Agent.FNS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.FNS virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

pastebin.com

ocsp.digicert.com

1fichier.com

How to determine Win32/TrojanDownloader.Agent.FNS?


File Info:
crc32: 4858C790md5: 05e702bccf1dfbf0429a7e4097ccabf5name: 05E702BCCF1DFBF0429A7E4097CCABF5.mlwsha1: 1ca158abbe395025ad40912c46c6dba0235fa544sha256: 72c6ad0d31aa052c6133922fa701b7eb61abe5f8843c80be76022759fa253f8asha512: b8df3d9d4ce2de5d0b4dedd1b6a3d666653af9c22f2a14d0914b14261ad29dc4e604b421d249cc8ff16c39d173838832941955f81ff1ab102e0ccedc74f6be79ssdeep: 49152:a9N26FOnzGn6LJvqkwnpC+mWd6uIcccbPi:a906FOznLo0+Dd6uxccbatype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
ProductVersion: 9.1.0.0ProductName: SetupFileVersion: 9.1.0.0OriginalFilename: suf_launch.exeFileDescription: Setup ApplicationTranslation: 0x0409 0x0000

Win32/TrojanDownloader.Agent.FNS also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36257496
FireEye	Trojan.GenericKD.36257496
McAfee	Artemis!05E702BCCF1D
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Adload.a!c
Sangfor	Trojan.Win32.Adload.scio
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.36257496
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Indiloadz.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Agent.FNS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Downloader.Win32.Adload.scio
Alibaba	TrojanDownloader:Win32/Adload.a0a0d2f5
Rising	Downloader.Adload!8.D1 (CLOUD)
Ad-Aware	Trojan.GenericKD.36257496
Zillya	Downloader.Adload.Win32.100296
TrendMicro	TROJ_GEN.R035C0WAU21
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vc
Emsisoft	Trojan.GenericKD.36257496 (B)
MAX	malware (ai score=86)
Microsoft	Trojan:Win32/Ymacco.AB72
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D2293ED8
AhnLab-V3	Malware/Win32.Generic.C4251457
ZoneAlarm	Trojan-Downloader.Win32.Adload.scio
GData	Trojan.GenericKD.36257496
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.36257496
Malwarebytes	Malware.AI.370984832
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R035C0WAU21
Tencent	Win32.Trojan-downloader.Adload.Hfj
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Indiloadz.CA!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Adware.AdLoad.HgIASN8A