Categories: Backdoor

Should I remove “Backdoor:Win32/Farfli.AAB!MTB”?

The Backdoor:Win32/Farfli.AAB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Farfli.AAB!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Binary file triggered YARA rule

How to determine Backdoor:Win32/Farfli.AAB!MTB?


File Info:
name: E430BDCE6414C150BEF1.mlwpath: /opt/CAPEv2/storage/binaries/e53818fa2e964e638f5cc3f30f784d87c3fba497f03f0228010539d468dfc804crc32: C7355289md5: e430bdce6414c150bef18f46ee994496sha1: 4db58891fe2ffe64e223757c76602e20cebd26easha256: e53818fa2e964e638f5cc3f30f784d87c3fba497f03f0228010539d468dfc804sha512: 42372f7fd71d0267b660aecdebc4a3eb7db6b76d2bb6ca5a5ecdf5d17b931c4af57fd069143d74dbf6be1babf41a098c0072190d4c7522ba3321b18d3a60f917ssdeep: 3072:hDORNKUq6p5lMuis+QeNzncMyL9alFHstgWF:haRN7q6pSSunpllytZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10BB36C17B69084FBD4F1103C68F63B31EBBBAC7649299D43F7148A456CB058AEB25387sha3_384: 971f8f264154419266d812ce9ad9d5b44ee9eb4bde199927855f13c6baff1f97fa72a63ca2ec043af908d9265d639a89ep_bytes: 558bec6aff6828174000686034400064timestamp: 2010-11-12 20:46:32
Version Info:
0: [No Data]

Backdoor:Win32/Farfli.AAB!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.PcClient2.CF784B55
FireEye	Generic.mg.e430bdce6414c150
CAT-QuickHeal	Backdoor.Morix.A2
Skyhigh	BehavesLike.Win32.Infected.ch
ALYac	Generic.PcClient2.CF784B55
Cylance	unsafe
Zillya	Trojan.MaganiaGen.Win32.1
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Backdoor:Win32/Farfli.152bcf0d
K7GW	Trojan ( 0001140e1 )
K7AntiVirus	Trojan ( 0001140e1 )
Baidu	Win32.Backdoor.Agent.a
VirIT	Backdoor.Win32.Generic.VO
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Dialer.NEW
APEX	Malicious
TrendMicro-HouseCall	TSPY_HUPIGON_CD102EC7.RDXN
ClamAV	Win.Dropper.Gh0stRAT-6992317-0
Kaspersky	Trojan.Win32.Agent.nevvav
BitDefender	Generic.PcClient2.CF784B55
NANO-Antivirus	Trojan.Win32.Magania.cweal
Avast	Win32:Agent-AOHB [Trj]
Tencent	Malware.Win32.Gencirc.13c1b007
Emsisoft	Generic.PcClient2.CF784B55 (B)
DrWeb	Trojan.PWS.Gamania.31987
VIPRE	Generic.PcClient2.CF784B55
TrendMicro	TSPY_HUPIGON_CD102EC7.RDXN
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Backdoor.Farfli
Jiangmin	Trojan/PSW.Magania.asri
Webroot	W32.Trojan.Gen
Google	Detected
Varist	W32/Rbot.A.gen!Eldorado
Antiy-AVL	Trojan[GameThief]/Win32.Magania
Kingsoft	Win32.Trojan.Agent.nevvav
Microsoft	Backdoor:Win32/Farfli.AAB!MTB
Xcitium	TrojWare.Win32.Agent.DFK@4ldvy7
Arcabit	Generic.PcClient2.CF784B55
ViRobot	Trojan.Win32.A.PSW-Magania.50562
ZoneAlarm	Trojan.Win32.Agent.nevvav
GData	Generic.PcClient2.CF784B55
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Gh0st.R6033
Acronis	suspicious
McAfee	GenericRXEO-RS!E430BDCE6414
MAX	malware (ai score=100)
VBA32	BScope.Trojan.SvcHorse.01643
Malwarebytes	Malware.AI.2383294221
Panda	Trj/Genetic.gen
Rising	Backdoor.Agent!1.65E6 (CLASSIC)
Yandex	Trojan.Agent!5TtWNPBmxRo
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.2884337.susgen
Fortinet	W32/Generic.AC.3167!tr
AVG	Win32:Agent-AOHB [Trj]
alibabacloud	Backdoor:Win/Graftor