Categories: Malware

ML/PE-A + Troj/Gyepis-A removal instruction

The ML/PE-A + Troj/Gyepis-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Troj/Gyepis-A virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Installs itself for autorun at Windows startup
Creates a slightly modified copy of itself
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine ML/PE-A + Troj/Gyepis-A?


File Info:
crc32: 389B7E24md5: f6a269836c48302f4a50504ecaef77bename: F6A269836C48302F4A50504ECAEF77BE.mlwsha1: 7bc9a547613fe1ec3e9b99c41a744af106c9a4dcsha256: dcd8c9314972dc3013cfc8e0342a22f5eea0cd29523123bc98ceadcf4d8993casha512: 26702890d9ddba672b7a7001ddb0d988e7777c4c8785c74d10eb74e0dc50ca7df594d9527c5a4e356628183ccc0686022b5e02c1240e8843c1aba7bc771c58a9ssdeep: 3072:eaOcumc7ijjS7HPRQfwUJG0/PWiud3uWHWABIippBQ:LOCcuqjKf/JG0/PWiuvBRppBQtype: MS-DOS executable, MZ for MS-DOS
Version Info:
FileDescription: x420x435x434x430x43ax442x43ex440 x43bx438x447x43dx44bx445 x441x438x43cx432x43ex43bx43ex432CompanyName: x41ax43ex440x43fx43ex440x430x446x438x44f  x41cx430x439x43ax440x43ex441x43ex444x442Translation: 0x0419 0x04b0

ML/PE-A + Troj/Gyepis-A also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0052964f1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Redirect.140
Cynet	Malicious (score: 100)
ALYac	Trojan.Lethic.Gen.11
Cylance	Unsafe
Zillya	Dropper.Gepys.Win32.1069
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0052964f1 )
Cybereason	malicious.36c483
Baidu	Win32.Trojan.Agent.eq
Cyren	W32/Gepys.AT.gen!Eldorado
Symantec	Packed.Generic.459
ESET-NOD32	Win32/TrojanDropper.Gepys.AA
APEX	Malicious
Avast	Win32:Gepys-E [Trj]
ClamAV	Win.Malware.Cerber-6803884-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Lethic.Gen.11
NANO-Antivirus	Trojan.Win32.ShipUp.crgjdf
ViRobot	Trojan.Win32.Agent.229200
MicroWorld-eScan	Trojan.Lethic.Gen.11
Tencent	Malware.Win32.Gencirc.10cf83be
Ad-Aware	Trojan.Lethic.Gen.11
Sophos	ML/PE-A + Troj/Gyepis-A
Comodo	TrojWare.Win32.Kryptik.AYQE@4wlbfl
BitDefenderTheta	Gen:NN.ZexaF.34266.qq1@a8eseshc
VIPRE	Trojan.Win32.Zbot.m (v)
TrendMicro	TROJ_KRYPTK.SMAD
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.f6a269836c48302f
Emsisoft	Trojan.Lethic.Gen.11 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/ShipUp.jr
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	Trojan/Generic.ASMalwS.21A2ECD
Microsoft	Trojan:Win32/Zbot.SIBL!MTB
Arcabit	Trojan.Lethic.Gen.11
GData	Trojan.Lethic.Gen.11
TACHYON	Trojan/W32.Agent.270136
Acronis	suspicious
McAfee	GenericRXCQ-PF!F6A269836C48
MAX	malware (ai score=81)
VBA32	BScope.Malware-Cryptor.Hlux
Malwarebytes	Trojan.Dropper
Panda	Trj/Hexas.A
TrendMicro-HouseCall	TROJ_KRYPTK.SMAD
Rising	Trojan.Kryptik!1.AB8B (CLASSIC)
Yandex	Trojan.Agent!OgMoxmwpKuU
Ikarus	Trojan-Dropper.Win32.Gepys
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.AYUW!tr
AVG	Win32:Gepys-E [Trj]