Should I remove "ML/PE-A + Mal/VB-FD"?

The ML/PE-A + Mal/VB-FD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Mal/VB-FD virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine ML/PE-A + Mal/VB-FD?


File Info:
crc32: A4658973
md5: 210c0eba2c74377e9b3d631051d306ce
name: 210C0EBA2C74377E9B3D631051D306CE.mlw
sha1: 7cca42dd32c30f9b65b6c53e5dbdd0e4ad3dfcf9
sha256: 2f81943d24061785dd102f12ba2678dda164766df2da85bb22fa60ac124deea0
sha512: 01d1d2cf247b20dbc77a3b0ba7943d92beb7ad89a059cda4c057f16477edda867256101265da881b9112073786e1758eb11a02bb39d72239e524af3b5b733645
ssdeep: 6144:xxc3+x2uWuQNDY8KJgTnS2DOiTphaGnrKfYI3cnH3zT8X7ne+SgEtsTYn9NI/UWR:x9XWLNvVSaphVUJGjKneME6cnY/UW8vY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0c0a 0x04b0
InternalName: stub
FileVersion: 1.00
CompanyName: server
ProductName: stub
ProductVersion: 1.00
OriginalFilename: stub.exe

ML/PE-A + Mal/VB-FD also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 002a405c1 )
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.SpyNet.449
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.VBCrypt.MF.5920
ALYac	Gen:Trojan.Heur.vm0@bDKn9lM
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Vbinder.b9443ea3
K7GW	Trojan ( 002a405c1 )
Cybereason	malicious.a2c743
Cyren	W32/VBInject.CC.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.APV
APEX	Malicious
Avast	Win32:GenMalicious-KKX [Trj]
Kaspersky	Trojan.Win32.Agent.voex
BitDefender	Gen:Trojan.Heur.vm0@bDKn9lM
NANO-Antivirus	Trojan.Win32.WBNA.fjhgoz
ViRobot	Trojan.Win32.PSWLdPinch.462848
MicroWorld-eScan	Gen:Trojan.Heur.vm0@bDKn9lM
Tencent	Win32.Trojan.Agent.Hmho
Ad-Aware	Gen:Trojan.Heur.vm0@bDKn9lM
Sophos	ML/PE-A + Mal/VB-FD
Comodo	Backdoor.Win32.Poison.~FFG@1x8tus
BitDefenderTheta	AI:Packer.A4AAEDCD1B
VIPRE	VirTool.Win32.VBInject.gen.bp (v)
TrendMicro	Mal_BUZUS-6
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.fc
FireEye	Generic.mg.210c0eba2c74377e
Emsisoft	Gen:Trojan.Heur.vm0@bDKn9lM (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/VBNA.gysl
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	VirTool:Win32/VBInject.RT
Arcabit	Trojan.Heur.EED585
ZoneAlarm	Trojan.Win32.Xtrat.ywx
GData	Gen:Trojan.Heur.vm0@bDKn9lM
AhnLab-V3	Trojan/Win32.Poison.R12492
McAfee	BackDoor-DZP.b
MAX	malware (ai score=86)
VBA32	Malware-Cryptor.VB.gen.1
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	Mal_BUZUS-6
Rising	Dropper.Generic!8.35E (CLOUD)
Yandex	Trojan.GenAsa!qHSnzlLuCE8
Ikarus	VirTool.Win32.Vbinder
Fortinet	W32/VBInjector.fam!tr
AVG	Win32:GenMalicious-KKX [Trj]
Paloalto	generic.ml

How to remove ML/PE-A + Mal/VB-FD?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “ML/PE-A + Mal/VB-FD”?