How to remove “ML/PE-A + Troj/Fareit-LRV”?

The ML/PE-A + Troj/Fareit-LRV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Troj/Fareit-LRV virus can do?

Network activity detected but not expressed in API logs

How to determine ML/PE-A + Troj/Fareit-LRV?


File Info:
crc32: 076B7F75
md5: 6e2a56a43aa1c6903caa31b90e9feef5
name: 6E2A56A43AA1C6903CAA31B90E9FEEF5.mlw
sha1: 6f2bfe1e131b6f13e12a4d39d4c0fda13a96f48d
sha256: 9fcb1ae54405e0b756552a2663110ba007bee6426945259b77a754dbbbf670d3
sha512: 9e46c3ff77e5135f9552c3d1a3499236d09da29688e5e9285b02cf4b0dbeca05f13fb9a2e0ba90c53324c9dfc3aa63e66ebc78cf9b544161dd9999c093c3849c
ssdeep: 12288:3J5SX2wx5siJGQjjwWt31veBMg1fJsw+Cn+gJtkyJM6:Z4mwxQNqN+7U61V
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:                                                                                                     
Assembly Version: 1.3.5.0
InternalName: ConsoleApp2_lM21.exe
FileVersion: 1.3.5.0
CompanyName: Aya Software                                                
LegalTrademarks: 
Comments: Aya AVI WMV DVD FLV RM MKV MP4 Video Splitter Cutter Setup  
ProductName: Aya AVI WMV DVD FLV RM MKV MP4 Video Splitter Cutter        
ProductVersion: 1.3.5.0
FileDescription: Aya AVI WMV DVD FLV RM MKV MP4 Video Splitter Cutter Setup  
OriginalFilename: ConsoleApp2_lM21.exe

ML/PE-A + Troj/Fareit-LRV also known as:

K7AntiVirus	Trojan ( 0057cd251 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Spyware.AgentTesla
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:MSIL/Kryptik.aab2dbda
K7GW	Trojan ( 0057cd251 )
Cybereason	malicious.e131b6
Cyren	W32/MSIL_Kryptik.EIP.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Kryptik.ABAS
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefender	Trojan.GenericKD.36939315
MicroWorld-eScan	Trojan.GenericKD.36939315
Ad-Aware	Trojan.GenericKD.36939315
Sophos	ML/PE-A + Troj/Fareit-LRV
BitDefenderTheta	Gen:NN.ZemsilF.34690.Mn0@aaov4bh
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Backdoor.MSIL.ANDROM.USMANEL21
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
FireEye	Generic.mg.6e2a56a43aa1c690
Emsisoft	Trojan.GenericKD.36939315 (B)
Avira	TR/AD.LokiBot.jinbf
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:MSIL/Tnega.AL!MTB
GData	MSIL.Trojan.BSE.XNY6ZA
AhnLab-V3	Malware/Win.Generic.C4482283
McAfee	Artemis!6E2A56A43AA1
MAX	malware (ai score=87)
Malwarebytes	Spyware.LokiBot
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Backdoor.MSIL.ANDROM.USMANEL21
Rising	Downloader.Seraph!8.111C6 (CLOUD)
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FFQR!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove ML/PE-A + Troj/Fareit-LRV?

ML/PE-A + Troj/Fareit-LRV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X