ML/PE-A + Mal/SillyFDC-U removal guide

The ML/PE-A + Mal/SillyFDC-U is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Mal/SillyFDC-U virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Expresses interest in specific running processes
Reads data out of its own binary image
Drops a binary and executes it
Installs itself for autorun at Windows startup
Creates a hidden or system file
Attempts to disable Windows Auto Updates
Creates a slightly modified copy of itself
Anomalous binary characteristics
Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

ns1.player1352.com

ns1.player1352.net

ns1.player1352.org

How to determine ML/PE-A + Mal/SillyFDC-U?


File Info:
crc32: F579E14B
md5: 62ea4dd5820c0a2f24f43f97dbf5d807
name: 62EA4DD5820C0A2F24F43F97DBF5D807.mlw
sha1: ac2325ff552596ba1837052a8fbff6b0985e06bc
sha256: c2c50e992d30cb65e47346a84e596c060f9d55da951cfddbc5ab84acefcfee9a
sha512: 85a2de35c567bf0394f78bc55bea05c8043acbfbef21ba9f5f02e8c9288072204d6b79624c2be6c8f316c29ff38be3b8cd03b5f6acdeca649f6a5ee5610f2943
ssdeep: 6144:Hy/Mn/3Kn/NbYl/a+fCf8SLJOIrhTyMMGRYq:S/MvKn/NH+qL8nMMsY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: rAEPGxSN
FileVersion: 1.00
OriginalFilename: rAEPGxSN.exe
ProductName: YpIOJBS

ML/PE-A + Mal/SillyFDC-U also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Chinky.7
FireEye	Generic.mg.62ea4dd5820c0a2f
CAT-QuickHeal	Trojan.Beebone.D
Qihoo-360	HEUR/QVM03.0.0A87.Malware.Gen
McAfee	VBObfus.cm
Cylance	Unsafe
VIPRE	Trojan-Downloader.Win32.VB.wsm (v)
Sangfor	Malware
K7AntiVirus	EmailWorm ( 0054d10f1 )
BitDefender	Gen:Variant.Chinky.7
K7GW	EmailWorm ( 0054d10f1 )
Cybereason	malicious.5820c0
Baidu	Win32.Worm.Pronny.d
Cyren	W32/Vobfus.AI.gen!Eldorado
Symantec	W32.Changeup
TotalDefense	Win32/FakeFLDR_i
APEX	Malicious
Avast	Win32:VB-AASY [Trj]
ClamAV	Win.Trojan.Vobfus-70360
Kaspersky	Worm.Win32.WBNA.ipa
NANO-Antivirus	Trojan.Win32.WBNA.coonfw
ViRobot	Trojan.Win32.A.Diple.327680.F
Tencent	Worm.Win32.Vobfus.n
Ad-Aware	Gen:Variant.Chinky.7
Emsisoft	Gen:Variant.Chinky.7 (B)
Comodo	TrojWare.Win32.Diple.EMIB@4pez3w
F-Secure	Trojan.TR/Diple.eklda
DrWeb	Trojan.VbCrypt.81
TrendMicro	WORM_VOBFUS.SMAB
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.fm
Sophos	ML/PE-A + Mal/SillyFDC-U
Ikarus	Worm.Win32.Vobfus
Avira	TR/Diple.eklda
MAX	malware (ai score=81)
Antiy-AVL	Worm/Win32.WBNA.gen
Microsoft	Worm:Win32/Vobfus.gen!R
Arcabit	Trojan.Chinky.7
SUPERAntiSpyware	Trojan.Agent/Gen-Multi[VB]
ZoneAlarm	Worm.Win32.WBNA.ipa
GData	Gen:Variant.Chinky.7
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Diple.R19788
BitDefenderTheta	Gen:NN.ZevbaF.34804.um0@amDsyFhi
ALYac	Gen:Variant.Chinky.7
TACHYON	Worm/W32.WBNA.327680
VBA32	TScope.Trojan.VB
Malwarebytes	Vobfus.Worm.Evasion.DDS
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/Pronny.AC
TrendMicro-HouseCall	WORM_VOBFUS.SMAB
Rising	Worm.VobfusEx!1.99DB (CLASSIC)
Yandex	Trojan.GenAsa!FPY5FVn5D7Y
SentinelOne	Static AI – Malicious PE – Worm
Fortinet	W32/Diple.EJQE!tr
AVG	Win32:VB-AASY [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen

How to remove ML/PE-A + Mal/SillyFDC-U?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

ML/PE-A + Mal/SillyFDC-U removal guide