What is “ML/PE-A + Mal/ExeSax-A”?

The ML/PE-A + Mal/ExeSax-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Mal/ExeSax-A virus can do?

Authenticode signature is invalid

How to determine ML/PE-A + Mal/ExeSax-A?


File Info:
name: 7906D7E4742125957115.mlw
path: /opt/CAPEv2/storage/binaries/71e1ec8282da40fedbcfb62692f5c809ade607d0f39f0fa189c0426528466fea
crc32: 085F3DD6
md5: 7906d7e474212595711532ca1c6d06f7
sha1: 9732f48fcb1968de53af8b74fdb2f724f1249155
sha256: 71e1ec8282da40fedbcfb62692f5c809ade607d0f39f0fa189c0426528466fea
sha512: cae9826e304587d70c82918766d131f3157de5c7d7dac7b38bdf7fa4b1cb38f10c299e1b6e051ea1fc1730f19e83f834ae989d4998f475cbe837822f066f5914
ssdeep: 192:/TTv3lvi8X8vb3Tot9ox0+Tyngl34mDG48:/TDQ8XSD0uxfTyngemDG48
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18F322E308BBD1487F76A46B40245CCB06C5B3710B7FE0A49A795A259FE2FB607C20E5B
sha3_384: 5c4bf0340953d6ff843c2f127c663bc1a699216bf56074c8a2d882f102f5912294fa257d3f261f7122d8efc5a027de81
ep_bytes: 909090905152b9dd020000bbdc424000
timestamp: 2007-05-23 12:55:23

Version Info:
0: [No Data]

ML/PE-A + Mal/ExeSax-A also known as:

MicroWorld-eScan	Gen:Variant.Zusy.408370
FireEye	Generic.mg.7906d7e474212595
ALYac	Gen:Variant.Zusy.408370
Cylance	Unsafe
Cybereason	malicious.fcb196
BitDefenderTheta	Gen:NN.ZexaF.34294.amW@aiw5zwf
Cyren	W32/Sdum.K.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	Gen:Variant.Zusy.408370
Avast	Win32:Evo-gen [Susp]
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazoFqxqeaa2V5dSDNCdj32TU)
Ad-Aware	Gen:Variant.Zusy.408370
Sophos	ML/PE-A + Mal/ExeSax-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
Emsisoft	Gen:Variant.Zusy.408370 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.408370
Jiangmin	Trojan.Multi.fjf
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Malware-gen.R453346
McAfee	Artemis!7906D7E47421
MAX	malware (ai score=82)
VBA32	Malware-Cryptor.General.3
TrendMicro-HouseCall	TROJ_GEN.R03BH0CKO21
Ikarus	Trojan-Dropper.Win32.VB
Fortinet	W32/Agent.29A1!tr
AVG	Win32:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove ML/PE-A + Mal/ExeSax-A?

ML/PE-A + Mal/ExeSax-A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X