Categories: Malware

ML/PE-A + W32/Belvima-A removal

The ML/PE-A + W32/Belvima-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + W32/Belvima-A virus can do?

Attempts to connect to a dead IP:Port (2 unique times)
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Likely virus infection of existing system binary
Creates a copy of itself
Anomalous binary characteristics

Related domains:

irc.mgts.by

irc.tut.by

How to determine ML/PE-A + W32/Belvima-A?


File Info:
crc32: 455A926Fmd5: a64bac0759441044cff807bff121bf06name: A64BAC0759441044CFF807BFF121BF06.mlwsha1: 871c6ef64acb6aa8062e02363ac81e1bf96663a4sha256: 4c4e9c9b9b39eba5853b4423b2e0decd5b962711dada1ae706cbb6792b429ca2sha512: ae89e6ba01c8e80cbb67768a50fd377040eb1cf4d5fa9117c7cbe2816d43a9f70bf1b64c58ee07e4b6ad234efba55f35257668fe7c89db433919f3a23b4499bcssdeep: 24576:5T9+YsH7BwPPZJhsTdZG8sGw+XVav9MkvLfUy:5kH7ChsTbtLwvv9MQLfUytype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

ML/PE-A + W32/Belvima-A also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Win32.HLLP.Canbis.1
MicroWorld-eScan	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb
FireEye	Generic.mg.a64bac0759441044
CAT-QuickHeal	W32.Fujack.gen
ALYac	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb
Cylance	Unsafe
VIPRE	Worm.Win32.Fujack.cy (v)
Sangfor	Malware
K7AntiVirus	Trojan ( 005408ce1 )
BitDefender	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb
K7GW	Trojan ( 005408ce1 )
Cybereason	malicious.759441
BitDefenderTheta	AI:Packer.365F9CF81E
Cyren	W32/IrcBot.S.gen!Eldorado
Symantec	W32.Canbis
TotalDefense	Win32/Cabismul.A
Avast	Win32:Malware-gen
ClamAV	Win.Worm.Fujacks-6736808-0
Kaspersky	Worm.Win32.Fujack.cy
NANO-Antivirus	Trojan.Win32.Fujack.bigkes
ViRobot	Worm.Win32.A.Fujack.155717
Rising	Virus.Canbis!1.B494 (CLASSIC)
Ad-Aware	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb
TACHYON	Worm/W32.Fujack.B
Sophos	ML/PE-A + W32/Belvima-A
Comodo	TrojWare.Win32.TrojanDownloader.Delf.gen@1xqow5
F-Secure	Trojan.TR/Dldr.Delphi.Gen
Zillya	Worm.Canbis.Win32.15
McAfee-GW-Edition	BehavesLike.Win32.Wanex.th
Emsisoft	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb (B)
SentinelOne	Static AI – Malicious PE – Worm
Jiangmin	Worm/Agent.bca
MaxSecure	Virus.W32.Delf.DE
Avira	TR/Dldr.Delphi.Gen
Antiy-AVL	Worm/Win32.Fujack.cy
Microsoft	Virus:Win32/Canbis.B
Arcabit	Trojan.IRC-Backdoor.EADF68
ZoneAlarm	Worm.Win32.Fujack.cy
GData	Gen:Trojan.IRC-Backdoor.fHZ@amCoZUb
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Fujack.C46142
Acronis	suspicious
McAfee	W32/HLLP.Canbe.d
MAX	malware (ai score=81)
VBA32	BScope.Worm.Fujack
Malwarebytes	Malware.AI.279497734
Panda	W32/Knase.C
APEX	Malicious
ESET-NOD32	Win32/Canbis.D
Tencent	Virus.Win32.Agent.zzb
Yandex	Trojan.GenAsa!53GRwVetZPQ
Ikarus	Trojan-Dropper.Delf
eGambit	Unsafe.AI_Score_100%
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	QVM41.1.Malware.Gen