How to remove “Win32/TrojanDownloader.Agent.FSO”?

The Win32/TrojanDownloader.Agent.FSO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Agent.FSO virus can do?

Network activity detected but not expressed in API logs
Collects information to fingerprint the system

How to determine Win32/TrojanDownloader.Agent.FSO?


File Info:
crc32: 41C6C33D
md5: e2919dea773eb0796e46e126dbce17b1
name: E2919DEA773EB0796E46E126DBCE17B1.mlw
sha1: 94aa7417f388c61a2d63ddcba6efec80c55f8555
sha256: b46949feeda8726c0fb86d3cd32d3f3f53f6d2e6e3fcd6f893a76b8b2632b249
sha512: 6391afce27000fd9d67ecc5343fcca602a8605e31c6c8651b439eae18b42c4e32ad7fb5efbcd7cee28b2630304cb128df9a1789d6fd39cd5bc7e6bf3880060a5
ssdeep: 24576:rh3ldwbFRTZQRbtTV0y6UrtP6/BVsG0FXZeymy6YKTRATAx:SFRTZQRbtTV0y6q6J6ea7KTHx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: Milan.exe
FileVersion: 0.1.0.1
CompanyName: Milan
ProductName: Milan.exe
ProductVersion: 0.1.0.1
FileDescription: Milan
OriginalFilename: Milan.exe
Translation: 0x0409 0x04b0

Win32/TrojanDownloader.Agent.FSO also known as:

DrWeb	Trojan.Siggen14.11426
ALYac	Backdoor.Agent.LyciHex
Cylance	Unsafe
Sangfor	Trojan.Win32.Agentb.gen
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan-Downloader ( 0057f01e1 )
K7AntiVirus	Trojan-Downloader ( 0057f01e1 )
Cyren	W32/Trojan.XTJS-3546
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FSO
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Trojan.GenericKD.37146393
NANO-Antivirus	Trojan.Win32.TrjGen.iwwndc
ViRobot	Trojan.Win32.Agent.987136.K
MicroWorld-eScan	Trojan.GenericKD.37146393
Ad-Aware	Trojan.GenericKD.37146393
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34088.8C0@aeDAScni
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R011C0WG721
FireEye	Trojan.GenericKD.37146393
Emsisoft	Trojan.GenericKD.37146393 (B)
eGambit	Unsafe.AI_Score_95%
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D236CF19
ZoneAlarm	HEUR:Trojan.Win32.Agentb.gen
GData	Trojan.GenericKD.37146393
VBA32	Trojan.Agentb
TrendMicro-HouseCall	TROJ_GEN.R011C0WG721
Rising	Backdoor.[APT34]Milan!1.D6ED (CLASSIC)
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.9325066.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Agentb.HgIASXwA

How to remove Win32/TrojanDownloader.Agent.FSO?

Win32/TrojanDownloader.Agent.FSO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X