Mal/FareitVB-N (file analysis)

The Mal/FareitVB-N is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Mal/FareitVB-N virus can do?

• Executable code extraction
• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine Mal/FareitVB-N?

File Info:
crc32: 19D66025md5: 5ecf9a09d31b04c04cae72cd504aea45name: bill.txtsha1: 562a20c00e58ecc8ee2eca02f3075c01a335e32dsha256: 9934775b033c1b9b5b9af0535072c5742a33f756f05ff56b1695ca723a46509bsha512: ed16f2132c95f8c687fda91df6d7335894228c85e71fb33fc39565ff9547d20dd702aadbb69beb078ec3d6802e85ce55e4d3afdaed5939de1f9921a3a171f3fessdeep: 12288:oVXUBsuUbeTQrkOPgJxqPvvTzwC35TgeZmJNvhb9VWzQDBBph6+jxjqj:oVXZteTSgJxqX9TkDTDBjxjqjtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0ProductVersion: 1.02.0002InternalName: hrattBFileVersion: 1.02.0002OriginalFilename: hrattB.exeProductName: hESA

Mal/FareitVB-N also known as:

MicroWorld-eScan	Trojan.GenericKD.32685288
CAT-QuickHeal	Trojan.Wacatac
McAfee	RDN/Generic.dx
Cylance	Unsafe
AegisLab	Trojan.Win32.Malicious.4!c
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/NetWiredRC.5f33238d
K7GW	Trojan ( 0055af4f1 )
K7AntiVirus	Trojan ( 0055af4f1 )
Arcabit	Trojan.Generic.D1F2BCE8
Invincea	heuristic
F-Prot	W32/VBKrypt.ACY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EITD
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
ClamAV	Win.Trojan.VBGeneric-7375929-0
Kaspersky	Backdoor.Win32.NetWiredRC.jll
BitDefender	Trojan.GenericKD.32685288
NANO-Antivirus	Trojan.Win32.Dwn.ggahjq
Endgame	malicious (high confidence)
Comodo	Malware@#1qpgad2z9m18
F-Secure	Trojan.TR/Injector.kjugq
DrWeb	BackDoor.Wirenet.543
TrendMicro	TROJ_FRS.VSNW06K19
McAfee-GW-Edition	BehavesLike.Win32.Fareit.jh
Fortinet	W32/Injector.EITD!tr
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.5ecf9a09d31b04c0
Sophos	Mal/FareitVB-N
Ikarus	Trojan.VB.Crypt
Cyren	W32/VBKrypt.ACY.gen!Eldorado
Webroot	W32.Trojan.Gen
Avira	TR/Injector.kjugq
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Backdoor]/Win32.NetWiredRC
Microsoft	Trojan:Win32/Tiggre!rfn
ZoneAlarm	Backdoor.Win32.NetWiredRC.jll
AhnLab-V3	Trojan/Win32.Injector.C3549391
Acronis	suspicious
ALYac	Trojan.GenericKD.32685288
Ad-Aware	Trojan.GenericKD.32685288
Malwarebytes	Trojan.MalPack.VB
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_FRS.VSNW06K19
Yandex	Backdoor.NetWiredRC!CPImXgcGktk
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_93%
GData	Trojan.GenericKD.32685288
BitDefenderTheta	Gen:Trojan.Heur2.PPBB.3.0.Nm0@b0TtoBbir
AVG	Win32:RATX-gen [Trj]
Cybereason	malicious.00e58e
Paloalto	generic.ml
Qihoo-360	HEUR/QVM03.0.093B.Malware.Gen

How to remove Mal/FareitVB-N?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.