Trojan

Should I remove “Trojan:Win32/Fareit.VA!MTB”?

Malware Removal

The Trojan:Win32/Fareit.VA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Fareit.VA!MTB virus can do?

  • Unconventionial language used in binary resources: Spanish (Ecuador)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Trojan:Win32/Fareit.VA!MTB?


File Info:

crc32: 56E35EF2
md5: e88d274557b3198fb2b172ec5aecb964
name: E88D274557B3198FB2B172EC5AECB964.mlw
sha1: e50ba5c7ad3f49687976b47aa98ee0600e3bc6f3
sha256: b48bf944376ab993e05e7cb9d51550682d9685d1ea77a1f100232ba38f884172
sha512: 0c66c3869d8702d000a0c0d4ec5c18372ba7669de1145c9b25a7a57e4a093e3a9edcf23d9039a9b8603896b6994b1f5f4365cdc240085f3f380af07a88cf4a61
ssdeep: 12288:+x6dpxwWnhS7Fxftme9bsk8sFCS05RAy0hbVw:+xDEEmeVQsFCS056y0hbO
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan:Win32/Fareit.VA!MTB also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0056f4781 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojanspy.Mufila
ALYacDeepScan:Generic.Mint.Zamg.8.1FB36096
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Kryptik.62cd4a51
K7GWTrojan ( 0056f4781 )
Cybereasonmalicious.557b31
CyrenW32/S-fa0426b4!Eldorado
SymantecInfostealer.Rultazo
ESET-NOD32a variant of Win32/Kryptik.GQTE
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Mint.Zamg.8.1FB36096
NANO-AntivirusTrojan.Win32.Mufila.fptxxg
ViRobotTrojan.Win32.GandCrab.Gen.B
MicroWorld-eScanDeepScan:Generic.Mint.Zamg.8.1FB36096
TencentWin32.Trojan.Generic.Alir
Ad-AwareDeepScan:Generic.Mint.Zamg.8.1FB36096
SophosMal/Generic-S + Mal/GandCrab-G
ComodoMalware@#27jacc4w9xg4u
BitDefenderThetaGen:NN.ZexaF.34770.HmGfaGHu5FP
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.e88d274557b3198f
EmsisoftDeepScan:Generic.Mint.Zamg.8.1FB36096 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dhsyd
AviraTR/AD.VidarStealer.pdw
MicrosoftTrojan:Win32/Fareit.VA!MTB
GDataDeepScan:Generic.Mint.Zamg.8.1FB36096
AhnLab-V3Trojan/Win32.RansomCrypt.R258745
Acronissuspicious
McAfeeArtemis!E88D274557B3
MAXmalware (ai score=82)
VBA32BScope.Trojan.Diple
MalwarebytesTrojan.MalPack.GS.Generic
PandaTrj/Genetic.gen
RisingRansom.Crypmod!1.B654 (CLASSIC)
YandexTrojanSpy.Mufila!sXWf9slyklU
IkarusTrojan-Ransom.GandCrab
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GSBB!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.PonyRAT.HwsBEpsA

How to remove Trojan:Win32/Fareit.VA!MTB?

Trojan:Win32/Fareit.VA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment