Trojan:Win32/Fuery.A!cl

[plushkinn]

I was playing some cs 1.6 league, then league's anticheat stopped working, after 5-10 mins windows anticheat's found Trojan:Win32/Fuery.A!cl.

Can you tell what Trojan:Win32/Fuery.A!cl can do?

[LewisPark]

15 minutes ago, plushkinn said:

I was playing some cs 1.6 league, then league's anticheat stopped working, after 5-10 mins windows anticheat's found Trojan:Win32/Fuery.A!cl.

Can you tell what Trojan:Win32/Fuery.A!cl can do?

From Microsoft's website...
"Symptoms of infection vary from threat to threat. In general, threat activity can result in unusual system behaviors, including unexpected opening of windows, unusual network connections identified by your firewall, and decreased system performance."

[AlexanderG]

According to Microsoft, this is a severely strong piece of malware. I did some research, and its goal is to target into the Windows System and execute commands to enter the Windows System to then collect info (System settings, Version of Windows, Network Configration and more), which is then sent to a remote attacker. Once it gets on the machine, it makes a copy of itself in the Windows system files (System32 for example) and creates a registry so that it executes on boot-up of the machine. It also cannot be seen easily: it runs as a background process. It also manages to hide from Windows Defender. To remove that piece of malware, you have to follow the steps on this website: https://malwaretips.com/blogs/remove-trojanwin32fuery-acl/ (Scroll down a bit and follow the steps. They even have pictures to go with it.)

[AlexanderG]

Please let me know if that worked for you.

[plushkinn]

it came from anticheat called gameguard you can find it here https://gameguard.ac/

but now i've run it and not threats were found. idk why. i used malwarebytes and kaspersky virus removal tool, and no threats were found

[AlexanderG]

But did you do the steps in the link I sent you?

[plushkinn]

i will after couple hours or tomorrow, i'll write info about it here

[AlexanderG]

Ok, awaiting your feedback

[quiprr]

1 hour ago, F1PlayBG said:

According to Microsoft, this is a severely strong piece of malware. I did some research, and its goal is to target into the Windows System and execute commands to enter the Windows System to then collect info (System settings, Version of Windows, Network Configration and more), which is then sent to a remote attacker. Once it gets on the machine, it makes a copy of itself in the Windows system files (System32 for example) and creates a registry so that it executes on boot-up of the machine. It also cannot be seen easily: it runs as a background process. It also manages to hide from Windows Defender. To remove that piece of malware, you have to follow the steps on this website: https://malwaretips.com/blogs/remove-trojanwin32fuery-acl/ (Scroll down a bit and follow the steps. They even have pictures to go with it.)

Honestly I would just reformat, I don't think it worming throughout your system can be stopped easily especially after a while, but I don't have enough info to know exactly what is viable at this point

Also, OP, I would do it as soon as you possibly can and see if you can save some of your files and such if those are part of a payload

[plushkinn]

i've done it all as was said here https://malwaretips.com/blogs/remove-trojanwin32fuery-acl/. nothing was found, except some google chrome cookies. then i think win 10 antivirus probably deleted it, cause i've seen quarantined it was written