Mal/FareitVB-AC (file analysis)

The Mal/FareitVB-AC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/FareitVB-AC virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/FareitVB-AC?


File Info:
crc32: 492824B5
md5: a5d57731450af6d7b9822fa19bb61975
name: origv2.exe
sha1: 2636e0de8fbc42e35f2bc60e31effac9caf5248d
sha256: b03b4960cb63000b6c8b87508a59b66fd9846beb4bee1cee66ab784e25cbeef0
sha512: f4b5a0662c9df1619a2d8dcd3c9a7ba480f815e10a0ab40036fab2c8265afcb144971eea3bda42f7aab595853d80f697a67a6ebfca89b362e83b215b66740ff3
ssdeep: 768:JyuyplyFL0uT90pC5q5mJ2wFDGsm8NDodewz/R7PL2:jyzyKuB0pt53Qu8KIkJ7S
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: GRIMES
FileVersion: 2.08
CompanyName: TABBa
Comments: TABBa
ProductName: Mostensski8
ProductVersion: 2.08
OriginalFilename: GRIMES.exe

Mal/FareitVB-AC also known as:

Bkav	W32.AIDetectVM.malware2
McAfee	Fareit-FSN!A5D57731450A
Cylance	Unsafe
Sangfor	Malware
F-Prot	W32/VBKrypt.AJN.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Endgame	malicious (high confidence)
Sophos	Mal/FareitVB-AC
McAfee-GW-Edition	Fareit-FSN!A5D57731450A
Ikarus	Trojan.VB.Crypt
Cyren	W32/VBKrypt.AJN.gen!Eldorado
Webroot	W32.Malware.Gen
ZoneAlarm	UDS:DangerousObject.Multi.Generic
AhnLab-V3	Trojan/Win32.VBKrypt.R334780
BitDefenderTheta	Gen:NN.ZevbaCO.34108.em0@aGs0AFhi
Malwarebytes	Trojan.Injector
ESET-NOD32	a variant of Win32/Injector.ELRB
Rising	Trojan.Injector!1.C5B6 (CLASSIC)
eGambit	Unsafe.AI_Score_94%
Fortinet	W32/GuLoader.VHIP!tr
AVG	FileRepMalware
Qihoo-360	HEUR/QVM03.0.E4C0.Malware.Gen

How to remove Mal/FareitVB-AC?

Mal/FareitVB-AC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X