Pafin.2 information

The Pafin.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Pafin.2 virus can do?

Network activity detected but not expressed in API logs

How to determine Pafin.2?


File Info:
crc32: C8C3E825
md5: 262218bd6facac639f7774aa3410d737
name: 262218BD6FACAC639F7774AA3410D737.mlw
sha1: bf364b99117eff9728e2d189ecccc32d66275fee
sha256: d1e5410f7981f85b829764004d788ab4c5d6282c72ac69f9d22295e01762dd08
sha512: bdf60ea264ff56b106910cd1fe0b2d677a40519f00ce022ef7a4f458d4552b272ea52e73d1109c21d64ec6896efe2cc5a35cc9e818c9f650cde2b8934c740bbb
ssdeep: 768:U0i/wMjNnpsOyMNb3WoQ2SvTc+en7syMN1gCblCZPah5H9:3i/wM5npsiNbzaQxaf9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: pwpf042vci0
Assembly Version: 3.0.0.0
InternalName: dxkddf0nobt.exe
FileVersion: 7.0.7.3
CompanyName: ffjj2vsegcf
Comments: zkedygn4rjb
ProductName: 3qoms3pcxeq
ProductVersion: 7.0.7.3
FileDescription: 3qoms3pcxeq
OriginalFilename: dxkddf0nobt.exe

Pafin.2 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Clipper.60
ALYac	Gen:Variant.Pafin.2
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
ESET-NOD32	a variant of MSIL/ClipBanker.JM
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.MSIL.Shelpak.gen
BitDefender	Gen:Variant.Pafin.2
MicroWorld-eScan	Gen:Variant.Pafin.2
Ad-Aware	Gen:Variant.Pafin.2
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34110.cm0@aSM8Fdl
FireEye	Generic.mg.262218bd6facac63
Emsisoft	Gen:Variant.Pafin.2 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/ATRAPS.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Pafin.2
GData	Gen:Variant.Pafin.2
AhnLab-V3	Malware/Win32.RL_Generic.C3469254
MAX	malware (ai score=84)
Malwarebytes	Trojan.ClipBanker
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Ikarus	Trojan.MSIL.ClipBanker
AVG	Win32:TrojanX-gen [Trj]

How to remove Pafin.2?

Pafin.2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X