How to remove “Trojan:Win32/Fareit!MSR”?

The Trojan:Win32/Fareit!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Fareit!MSR virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Telugu
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Fareit!MSR?


File Info:
crc32: 9644551A
md5: 03ecb4fd241aa6a9def12419d61c8b9e
name: upload_file
sha1: 2bf761a82213ca620dbf41f7f93fb63facc68731
sha256: ca145f79b7b6c1b83e3edd47cb458c98d68a0b343aceb1a3de12949c566a9d36
sha512: 57fbd2e925133469334efcac28969566102fa1cf314348382409d0f297f6e12e1258c62fd8e3f5d672806b76894b87d7f4019d51772975c0a8b65433da450b1a
ssdeep: 768:95bB4xnzSMUnyW91Y8Cm63A8Cc/E6DrSQeN1HKPsL63:7d44MUz7Y5m6379s6nSQeN1nL63
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x044a 0x04b0
InternalName: Porch
FileVersion: 1.00
CompanyName: Tanon
Comments: Tanon
ProductName: Nefariousness5
ProductVersion: 1.00
OriginalFilename: Porch.exe

Trojan:Win32/Fareit!MSR also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.43654109
FireEye	Trojan.GenericKD.43654109
McAfee	Artemis!03ECB4FD241A
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.43654109
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_90% (W)
TrendMicro	TROJ_FRS.0NA103HE20
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Injector.EMZY
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Vebzenpak.zbz
Alibaba	Trojan:Win32/Vebzenpak.90c0085c
ViRobot	Trojan.Win32.S.Agent.69632.CQQ
Tencent	Win32.Trojan.Vebzenpak.Glw
Ad-Aware	Trojan.GenericKD.43654109
Comodo	TrojWare.Win32.Agent.dmlou@0
F-Secure	Trojan.TR/AD.VBCryptor.wevat
Fortinet	PossibleThreat.PALLAS.H
Sophos	Mal/FareitVB-AE
Ikarus	Trojan.VBCryptor
Avira	TR/AD.VBCryptor.wevat
MAX	malware (ai score=84)
Arcabit	Trojan.Generic.D29A1BDD
AhnLab-V3	Trojan/Win32.VBCrypt.C4180936
ZoneAlarm	Trojan.Win32.Vebzenpak.zbz
Microsoft	Trojan:Win32/Fareit!MSR
Cynet	Malicious (score: 85)
ALYac	Trojan.Agent.Wacatac
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103HE20
Rising	Trojan.Vebzenpak!8.11687 (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_83%
GData	Trojan.GenericKD.43654109
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.71d

How to remove Trojan:Win32/Fareit!MSR?

Trojan:Win32/Fareit!MSR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X