ML/PE-A + Mal/Cridex-F information

The ML/PE-A + Mal/Cridex-F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Mal/Cridex-F virus can do?

Anomalous binary characteristics

How to determine ML/PE-A + Mal/Cridex-F?


File Info:
crc32: 53B1A1B4
md5: 1eacfd5581f264936f3997fc3c255aa6
name: 1EACFD5581F264936F3997FC3C255AA6.mlw
sha1: f4c8536df23d3e2430d5c08571469e6d127e508f
sha256: 5c1349a8d76342015c20eaae9a7dc21bce946c6e0cc38ba97088c117afff3c50
sha512: 3a15311e4c31a1c95563a36ed8c81f5e35dc46a225893d2ba1020d663b9e1526cdd3889e9b0c703aebbb648ccd43071983d95a419bc8badcc64dbb83f39b0a1b
ssdeep: 6144:GhBoLWUUsUYdMq2FUzG14mxbn/ZNLo77g7opnpGKNY9lr:GACUSAQP1jb/HLoXgHKanr
type: PE32 executable (Unknown subsystem 0x0) Unknown processor type 0x0 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Mjaqgzti Gmcorktoi Yehol
InternalName: Ldeokp
FileVersion: 
CompanyName: Mjaqgzti Gmcorktoi Yehol
ProductName: Ldeokp Mnzfd Psfrweso
ProductVersion: 
FileDescription: Ldeokp
OriginalFilename: Ldeokp.exe
Translation: 0x0409 0x04b0

ML/PE-A + Mal/Cridex-F also known as:

Bkav	W32.FamVT.FcodeNHc.Trojan
K7AntiVirus	Trojan ( 005325ee1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.217
ClamAV	Win.Trojan.Agent-740617
Malwarebytes	Malware.AI.2855038018
Zillya	Trojan.Foreign.Win32.9536
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005325ee1 )
Cybereason	malicious.df23d3
Baidu	Win32.Trojan.Filecoder.u
Cyren	W32/S-6e8d4b4d!Eldorado
Symantec	SMG.Heur!gen
APEX	Malicious
Cynet	Malicious (score: 100)
SUPERAntiSpyware	Ransom.FileLocker/Variant
Tencent	Trojan-Ransom.Win32.FileCoder.nan
Sophos	ML/PE-A + Mal/Cridex-F
Comodo	Backdoor.Win32.Hlux.NAN@6lffi4
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HAPERLOCK.SMA
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dh
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Foreign.ewc
Avira	TR/Ransom.Haperlock.nhcdt
Microsoft	Ransom:Win32/Haperlock.A
GData	Win32.Trojan.PSE.1PGMOEB
AhnLab-V3	Trojan/Win32.Foreign.R61679
Acronis	suspicious
McAfee	PWS-Zbot-FASG!1EACFD5581F2
TrendMicro-HouseCall	Ransom_HAPERLOCK.SMA
Rising	Ransom.Haperlock!8.5355 (TFE:dGZlOgV/sBv99cdTfw)
Ikarus	Trojan.Win32.Sisron
MaxSecure	Gen:Variant.Symmi.19582

How to remove ML/PE-A + Mal/Cridex-F?

ML/PE-A + Mal/Cridex-F removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X