How to remove “Trojan:Win32/Fareit.PT!MTB”?

The Trojan:Win32/Fareit.PT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Fareit.PT!MTB virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Fareit.PT!MTB?


File Info:
name: 077C1299A663EF4AC8D2.mlw
path: /opt/CAPEv2/storage/binaries/4ae1eb23aa8d2eb7a1e25e3ac4114d983a1c5b083047be55cc8a05848a507779
crc32: C1592DBB
md5: 077c1299a663ef4ac8d2e72d947a5421
sha1: d6f619d400a8fc93983f2216a4564491d0875b61
sha256: 4ae1eb23aa8d2eb7a1e25e3ac4114d983a1c5b083047be55cc8a05848a507779
sha512: e9af52d85dcef35458107939a34c18b6bc45f317b2f1822e5d46f28df67bbe0449dc01cff13bed40c80bdf2e09fb9bf9686675eb99c6b4eaf80c2f1814296fa7
ssdeep: 3072:C60DODBdtpZFMz8LcZ1wNvhtrt7N+raC6AR:XDftpZR4gNvft7ma
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T134446EE7664A8377FC0D2D72CA9704A156D3FC33E7A290A2AAC1371A45F5891E9FC107
sha3_384: b85e2de538ad16542dddb822b3dbd8f0798af1bd1d4f6414798e354019898d78fb385287ac8ebf9cdae86886477c22c5
ep_bytes: e8ab59ffff8d45c8e89329ffff8d45d0
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan:Win32/Fareit.PT!MTB also known as:

tehtris	Generic.Malware
ClamAV	Win.Malware.Genkryptik-9839711-0
Malwarebytes	Generic.Spyware.Stealer.DDS
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Win32/Fareit.70d151c7
CrowdStrike	win/malicious_confidence_100% (W)
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.dt
FireEye	Generic.mg.077c1299a663ef4a
Sophos	Generic ML PUA (PUA)
Antiy-AVL	Trojan/Win32.Fareit
Microsoft	Trojan:Win32/Fareit.PT!MTB
Google	Detected
McAfee	Artemis!077C1299A663
VBA32	BScope.Trojan.Occamy
TrendMicro-HouseCall	TROJ_GEN.R002H01AR23
Rising	Trojan.Kryptik!1.CAC5 (CLASSIC)
Ikarus	Trojan.Win32.IRCBot
MaxSecure	Trojan.Malware.205925550.susgen
AVG	Win32:Malware-gen
Cybereason	malicious.400a8f
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Fareit.PT!MTB?

Trojan:Win32/Fareit.PT!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X