ML/PE-A + Troj/Swrort-EI removal

The ML/PE-A + Troj/Swrort-EI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Troj/Swrort-EI virus can do?

Anomalous binary characteristics

How to determine ML/PE-A + Troj/Swrort-EI?


File Info:
crc32: 37406245
md5: 994a68b7f57287e8fc3d72405e14d67f
name: 994A68B7F57287E8FC3D72405E14D67F.mlw
sha1: 0f6f49ee21f71da32852f72174a414dbf9fd5b0c
sha256: a1b79b20e4704b70a6e3649c3e89bf3f81bf88684d48c5cd6611594d422e972c
sha512: 13bcea396fcc1c983d352ca628a959de6fa24fba6735bcd39b95cdb3efc760d4b8ccd8deea8c700317822c80a4f1fe02c79cba1de0a4e5a448dddfc876bb0dbd
ssdeep: 24:eFGStrJ9u0/6a0eMnZdkBQAV7O2ub+xqWcuaHz74lmAo12XGwL+xpmB:is0VwkBQMDqWc0lmAZL+2B
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

ML/PE-A + Troj/Swrort-EI also known as:

K7AntiVirus	Trojan ( 004fae881 )
Elastic	malicious (high confidence)
DrWeb	BackDoor.Shell.244
Cynet	Malicious (score: 100)
CAT-QuickHeal	HackTool.Metasploit.S9212471
ALYac	Trojan.Metasploit.A
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004fae881 )
Cybereason	malicious.7f5728
Cyren	W64/S-c4a4ef26!Eldorado
Symantec	Meterpreter
ESET-NOD32	a variant of Win64/Rozena.J
APEX	Malicious
Avast	Win64:Evo-gen [Susp]
ClamAV	Win.Packed.Metasploit-9805869-0
BitDefender	Trojan.Metasploit.A
MicroWorld-eScan	Trojan.Metasploit.A
Ad-Aware	Trojan.Metasploit.A
Sophos	ML/PE-A + Troj/Swrort-EI
TrendMicro	TROJ64_SWRORT.SM1
McAfee-GW-Edition	Trojan-FJIN!994A68B7F572
FireEye	Generic.mg.994a68b7f57287e8
Emsisoft	Trojan.Metasploit.A (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Generic.ASBOL.C673
Microsoft	Trojan:Win32/Meterpreter.A!cl
Gridinsoft	Trojan.Win64.ShellCode.sd!s1
SUPERAntiSpyware	Trojan.Agent/Gen-MalPack
GData	Trojan.Metasploit.A
AhnLab-V3	Trojan/Win.Generic.R374549
Acronis	suspicious
McAfee	Trojan-FJIN!994A68B7F572
MAX	malware (ai score=88)
Malwarebytes	Trojan.MalPack
TrendMicro-HouseCall	TROJ64_SWRORT.SM1
Rising	Trojan.Kryptik!1.A2F4 (CLASSIC)
Yandex	Trojan.GenAsa!RZuPNlUDbQk
Ikarus	Trojan.Win64.Rozena
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W64/Rozena.J!tr
AVG	Win64:Evo-gen [Susp]
Qihoo-360	Win32/Trojan.Generic.HgEASX0A

How to remove ML/PE-A + Troj/Swrort-EI?

ML/PE-A + Troj/Swrort-EI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X