Should I remove “Mal/PePatch-K”?

The Mal/PePatch-K is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/PePatch-K virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine Mal/PePatch-K?


File Info:
crc32: 5BCB8CCD
md5: 9b2a0192cf59d3f810bc0ef05d86aa80
name: 9B2A0192CF59D3F810BC0EF05D86AA80.mlw
sha1: ed76a30ca270a91239a4f79d4e0925248df53c33
sha256: 882513753ccdb45ada75f0172aeb647f57d56f3de676ef6995456847ad5ab466
sha512: 5deeb7ea68187af5d8e323713c33d96e1fbeacf7788547eae8071682c8864b30063b2268d192371fb90dfcf7fd725de5dc5a48419e55c1f6baac7538625797c6
ssdeep: 192:4JlVIPHhNVsUtiyK7XVOR6hVFm9YUpLFaNJhLkwcud2DH9VwGfct6D:4JCHhNVSyKDVphVpeRaNJawcudoD7Us
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Mal/PePatch-K also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.ca270a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.CQX
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Inject.chipuz
Sophos	Mal/PePatch-K
BitDefenderTheta	Gen:NN.ZexaF.34684.amGfaGDLrIoj
McAfee-GW-Edition	Trojan-FJYJ!3197DDE40E29
FireEye	Generic.mg.9b2a0192cf59d3f8
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_90%
Microsoft	TrojanDownloader:Win32/Nystprac.A
McAfee	Artemis!9B2A0192CF59
VBA32	Backdoor.Farfli
Rising	Backdoor.Farfli!8.B4 (TFE:5:uAt7haj1l3C)
Yandex	Trojan.GenAsa!WYe+2QTwEw8
Fortinet	W32/SERVSTART.D!tr
AVG	Win32:Evo-gen [Susp]

How to remove Mal/PePatch-K?

Mal/PePatch-K removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X