Categories: Malware

How to remove “ML/PE-A + Troj/AutoG-AD”?

The ML/PE-A + Troj/AutoG-AD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Troj/AutoG-AD virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
A process created a hidden window
Drops a binary and executes it
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Likely virus infection of existing system binary
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

ipip.website

How to determine ML/PE-A + Troj/AutoG-AD?


File Info:
crc32: FE66EEF5md5: 3b37396d0c15670d0b02856b6f3c1cecname: 3B37396D0C15670D0B02856B6F3C1CEC.mlwsha1: 573bfabbb78a4096da99a70e184e304a46fecd02sha256: 04c0fe1b4636ab427121415818fbffc371dacd7872325b18b763e1bc7ec4488asha512: 3041f44eb0a6c52963d015278b6ca49125db91e4a7697fc11591915e20c7103f3c9f15d531148d816ef3fc4efcddd26efff80f5089e6c205d1da2d88bb14b2cfssdeep: 1536:vqEA70HzLJksPEOajozLElnqiO2SdJ/tHi:vXTLJkQ7zAV3QtCtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2017InternalName: MFC KING 2017FileVersion: 1, 0, 0, 1CompanyName: LegalTrademarks: ProductName: Application MFC KING 2017ProductVersion: 1, 0, 0, 1FileDescription: Application MFC MFC KING 2017OriginalFilename: MFC KING 2017.EXETranslation: 0x040c 0x04b0

ML/PE-A + Troj/AutoG-AD also known as:

Bkav	W32.FamVT.Renamer1.Trojan
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.40455963
FireEye	Generic.mg.3b37396d0c15670d
Qihoo-360	Win32/Trojan.ab1
McAfee	GenericRXBH-NF!3B37396D0C15
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 00522d7f1 )
BitDefender	Trojan.GenericKD.40455963
K7GW	Trojan ( 00522d7f1 )
Cybereason	malicious.d0c156
BitDefenderTheta	Gen:NN.ZexaF.34700.hy0@am1sDGne
Cyren	W32/Zegost.ASWW-0194
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Farfli.CEN
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Gh0stRAT-6997745-0
Kaspersky	Trojan.Win32.Siscos.wbm
NANO-Antivirus	Trojan.Win32.Siscos.enrcbv
ViRobot	Trojan.Win32.Agent.114688.DM
Rising	Trojan.Farfli!1.C639 (KTSE)
Ad-Aware	Trojan.GenericKD.40455963
Sophos	ML/PE-A + Troj/AutoG-AD
Comodo	TrojWare.Win32.GameThief.Magania.~NWABU@18g2sq
F-Secure	Trojan.TR/AD.Farfli.cznig
DrWeb	Trojan.DownLoader23.39271
Zillya	Trojan.Siscos.Win32.4780
TrendMicro	BKDR_ZEGOST.SM35
McAfee-GW-Edition	GenericRXBH-NF!3B37396D0C15
Emsisoft	Trojan.Farfli (A)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Siscos.cd
Webroot	W32.Siscos
Avira	TR/AD.Farfli.cznig
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.Siscos
Kingsoft	Win32.Troj.Siscos.w.(kcloud)
Microsoft	Backdoor:Win32/Venik!rfn
Gridinsoft	Trojan.Win32.Agent.vb!n
Arcabit	Trojan.Generic.D2694F1B
SUPERAntiSpyware	Adware.Farli/Variant
AhnLab-V3	Trojan/Win32.Siscos.R199489
ZoneAlarm	Trojan.Win32.Siscos.wbm
GData	Trojan.GenericKD.40455963
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Trojan.GenericKD.40455963
VBA32	Trojan.Siscos
Malwarebytes	Backdoor.Farfli
Panda	Trj/Genetic.gen
Zoner	Trojan.Win32.90956
TrendMicro-HouseCall	BKDR_ZEGOST.SM35
Tencent	Malware.Win32.Gencirc.10b0cbd2
Yandex	Trojan.GenAsa!I74Hu0e5Xnc
Ikarus	Trojan.Win32.Farfli
eGambit	Trojan.Generic
Fortinet	W32/Siscos.WBM!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (D)