Malware

Mal/FareitVB-AB information

Malware Removal

The Mal/FareitVB-AB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/FareitVB-AB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Mal/FareitVB-AB?


File Info:

crc32: 1A2C5632
md5: 21dc693fb3c77d2ea55a9fee0c705fa3
name: tmp.exe
sha1: a5765fbd2e24462ce4fe3f5c833863a17d76d79b
sha256: bfba96f9fe309c54e375e1e1e868aa2a729cbc6989c9494dc4d74628004c3dce
sha512: 5840a0db0c2d622dcd52c0628461cfe746b7033e7d93f0b0f0c622f16d38eb926df085f7a368fe8588cb76846c131da64ce3fee6f85ffa06eb1c25a07d3c28ad
ssdeep: 1536:E9UGkOAL9w87tdt/w8wOFMdZ1NavAzfyPPnvKuYHPI/xkvlLbt:E9ZkOAL9wwtdtY8wOFMCvV/vuPIuv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: Assotkroat5
FileVersion: 2.01
CompanyName: Goosens
ProductName: Sholomsst
ProductVersion: 2.01
FileDescription: Goosens
OriginalFilename: Assotkroat5.exe

Mal/FareitVB-AB also known as:

McAfeeFareit-FTM!21DC693FB3C7
CylanceUnsafe
SangforMalware
BitDefenderThetaGen:NN.ZevbaCO.34110.hm0@aed2eTdi
KasperskyUDS:DangerousObject.Multi.Generic
SophosMal/FareitVB-AB
McAfee-GW-EditionBehavesLike.Win32.Fareit.ct
APEXMalicious
MicrosoftTrojan:Win32/Wacatac.C!ml
Endgamemalicious (high confidence)
ZoneAlarmUDS:DangerousObject.Multi.Generic
eGambitUnsafe.AI_Score_98%

How to remove Mal/FareitVB-AB?

Mal/FareitVB-AB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment