How to remove “ML/PE-A + ATK/Cobalt-B”?

The ML/PE-A + ATK/Cobalt-B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + ATK/Cobalt-B virus can do?

Anomalous binary characteristics

How to determine ML/PE-A + ATK/Cobalt-B?


File Info:
crc32: 570F4BA6
md5: 577f1c7957038f1cfcef5e25b1a57585
name: 577F1C7957038F1CFCEF5E25B1A57585.mlw
sha1: 22014961f545cf343bfedf0a5537ced830a4f666
sha256: 3cf6beaed3ad8d6274ef32834377b19f0d836a40d81fc59482096a90c2d2745b
sha512: eb062b6591a33f5d1ea0c3c58378cec69feaadc0c235fffa06ce51f6ddea8b1dd08d18918a10342156e870819335bce01c047bc7a49f03bb02097ea249af8c4b
ssdeep: 192:8HCugRK83SxHn2OQ/dmBI4KBPwgir+xzxC1cbqUqV/Qjo7AGa:QCxRKqbOCdWIVBPk+xz4OfCXAn
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

ML/PE-A + ATK/Cobalt-B also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005622831 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Swrort.41
ClamAV	Win.Trojan.CobaltStrike-7899872-1
CAT-QuickHeal	TrojanAPT.Cobalt.A7
ALYac	Trojan.CobaltStrike.AQ
Malwarebytes	Trojan.Rozena
Zillya	Trojan.Rozena.Win32.66034
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005622831 )
Cybereason	malicious.957038
Cyren	W32/Fugrafa.MKIR-7653
Symantec	Backdoor.Cobalt!gen3
ESET-NOD32	a variant of Win32/Rozena.AMZ
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.CobaltStrike.AQ
NANO-Antivirus	Trojan.Win32.Swrort.fahmzc
ViRobot	Trojan.Win32.Cobalt.14336
MicroWorld-eScan	Trojan.CobaltStrike.AQ
Tencent	Malware.Win32.Gencirc.10b0ccf8
Sophos	ML/PE-A + ATK/Cobalt-B
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win32.COBALT.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
FireEye	Generic.mg.577f1c7957038f1c
Emsisoft	Trojan.CobaltStrike.AQ (B)
Jiangmin	Trojan.Generic.ccimj
Avira	TR/Crypt.XPACK.Gen7
eGambit	Unsafe.AI_Score_51%
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Trojan:Win32/Swrort.A
Gridinsoft	Trojan.Win32.Swrort.vb!s1
Arcabit	Trojan.CobaltStrike.AQ
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.CobaltStrike.AQ
TACHYON	Trojan/W32.Agent.14336.WQ
AhnLab-V3	Trojan/Win32.CobaltStrike.R329694
MAX	malware (ai score=80)
VBA32	Trojan.Swrort
Rising	Backdoor.CobaltStrike!1.D049 (RDMK:cmRtazrHFOKAhdc2IB+AsGwpq1gZ)
Yandex	Trojan.GenAsa!/C5jzoNrl5s
Ikarus	Trojan.Win32.Rozena
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Generic.AC.416F47
AVG	Win32:Malware-gen
Qihoo-360	HEUR/QVM20.1.BE2B.Malware.Gen

How to remove ML/PE-A + ATK/Cobalt-B?

ML/PE-A + ATK/Cobalt-B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X