Should I remove “ML/PE-A + Mal/Behav-116”?

The ML/PE-A + Mal/Behav-116 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Mal/Behav-116 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine ML/PE-A + Mal/Behav-116?


File Info:
name: F4D1CEB9C70D66A8F5ED.mlw
path: /opt/CAPEv2/storage/binaries/b9426550ecaf0b805e5e2214a7b25f71e34e3058ef127c3d1f784cddacf5ea66
crc32: 7E1B18E3
md5: f4d1ceb9c70d66a8f5ed930755d00719
sha1: 68a0f3af0f598dd4c48530211b117819f2106b61
sha256: b9426550ecaf0b805e5e2214a7b25f71e34e3058ef127c3d1f784cddacf5ea66
sha512: 737228a8f801d0290bbd19c0e12e72104999a8506eac38d84ed9fbf9fad45f6a70095ff5979875647b061018e7ee099f62ff23e85a907124d4b15d5c2b0099cf
ssdeep: 3072:7A0HU4wSGCLwNN+rYIFmXOr64WLw6HXVkL+EyyKDhY49rWnMuFM3rM1:7A0HYC4NaFLW4WLw+lkLeY49CnM2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FC34BE12A300E032C0C7027956ACA7F54EBD5D30632A96CBB790AFFA6D752D152797CB
sha3_384: 15a5587c23cd2a5bfbf7b8f1fdb40bbbc9275c7338cc2b988cebcdf744981ce12bdcb771dee0474062c8078fec92037b
ep_bytes: e8845d0000e989feffff8bff558bec81
timestamp: 2016-03-28 10:11:21

Version Info:
0: [No Data]

ML/PE-A + Mal/Behav-116 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Heuristic.File.Generic.00×1!p
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.70377
FireEye	Generic.mg.f4d1ceb9c70d66a8
ALYac	Trojan.GenericKDZ.70377
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.2245
Sangfor	Ransom.Win32.Teslacrypt_6.se2
K7AntiVirus	Trojan ( 0055e3ef1 )
Alibaba	Trojan:Win32/TeslaCrypt.0b83b156
K7GW	Trojan ( 0055e3ef1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.34646.ouW@aWNQ4jdi
Cyren	W32/Kryptik.HEG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.TeslaCrypt.K
TrendMicro-HouseCall	Ransom.Win32.TESLA.SMTHA
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.70377
NANO-Antivirus	Trojan.Win32.AVKill.ebmcwu
Cynet	Malicious (score: 100)
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Filecoder.Hplw
Ad-Aware	Trojan.GenericKDZ.70377
Emsisoft	Trojan.GenericKDZ.70377 (B)
DrWeb	Trojan.Encoder.3564
VIPRE	Trojan.GenericKDZ.70377
TrendMicro	Ransom.Win32.TESLA.SMTHA
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/Behav-116
APEX	Malicious
Jiangmin	Trojan.Generic.uqnl
Avira	TR/Crypt.ZPACK.Gen8
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.3303
Microsoft	Ransom:Win32/Tescrypt.R
ViRobot	Trojan.Win32.Z.Teslacrypt.239616.C
GData	Trojan.GenericKDZ.70377
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R286963
Acronis	suspicious
McAfee	GenericRXIN-MM!F4D1CEB9C70D
Malwarebytes	MachineLearning/Anomalous.97%
Rising	Ransom.Tescrypt!8.3AF (TFE:5:1kxNctA34QT)
Yandex	Trojan.GenAsa!gwmQ7mkdP9g
Ikarus	Trojan-Ransom.TeslaCrypt
Fortinet	W32/TeslaCrypt.I!tr
AVG	Win32:Malware-gen
Cybereason	malicious.9c70d6
Panda	Trj/GdSda.A

How to remove ML/PE-A + Mal/Behav-116?

ML/PE-A + Mal/Behav-116 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X