Win32/Farfli.ASD removal instruction

The Win32/Farfli.ASD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Farfli.ASD virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Farfli.ASD?


File Info:
name: 063A8B6E961C0EB3767D.mlw
path: /opt/CAPEv2/storage/binaries/0809ea9f4aafa3b55ab751e54990b895d855f6ba633e513e41415f3076fae2ef
crc32: B8DEA147
md5: 063a8b6e961c0eb3767dc85e3c38a82a
sha1: 016bb9e1a9e9082d312d855919f3dc1d5b2df867
sha256: 0809ea9f4aafa3b55ab751e54990b895d855f6ba633e513e41415f3076fae2ef
sha512: fd100181580a67b6bcfe8f33cb8af802bf82bda059b5a5ac7cb397e26e3800d8198fea6768ba91f95a71ca6aa2832224cc31340e69391e53fd538a8a43cfbb1e
ssdeep: 1536:lKZ7DnL9QCJ7k5Jze/ZfYp1c0SvfLiCgTaXb3H3SlB7XXPJO6o2:lKZf5JaCxAp1vSXLiCuar3HsBzXPw2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CAB37C54E78586A5F9B0083088AE377BC6739C74020F5AF3B718EB550863156BE97F8B
sha3_384: 3c8ef80eb1d8f07ba1c7a44d81e3271748143823272e81db2d304aa02307dcf4288a4496ccce30813cc9c27b9ccb6457
ep_bytes: dfdfdfdf8bec6aff68b82f400068f60f
timestamp: 2013-01-26 07:36:37

Version Info:
0: [No Data]

Win32/Farfli.ASD also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.063a8b6e961c0eb3
CAT-QuickHeal	Trojan.Generic.SK1
McAfee	Artemis!063A8B6E961C
Cylance	Unsafe
VIPRE	Trojan.Win32.Zegost.lt (v)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Jorik.9485adcb
K7GW	Trojan ( 00496bf11 )
K7AntiVirus	Trojan ( 00496bf11 )
Baidu	Win32.Trojan.Farfli.aw
VirIT	Trojan.Win32.Generic.AFEE
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Farfli.ASD
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Farfli-9823560-0
Kaspersky	Trojan.Win32.Jorik.Zegost.kji
NANO-Antivirus	Trojan.Win32.Agent.bfzvta
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Jorik.Dla
Sophos	Mal/Generic-S
Comodo	Malware@#njm7uug8rfl4
McAfee-GW-Edition	BehavesLike.Win32.Sality.ch
Ikarus	Backdoor.Win32.Agent
Jiangmin	Heur:Trojan/Agent
Avira	BDS/Farfli.pzmnau
Antiy-AVL	Trojan/Generic.ASMalwS.19C2C4
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34182.giW@aC9Q2gfi
VBA32	BScope.Trojan.Jorik
Rising	Trojan.Jorik!8.1968 (CLOUD)
Yandex	Trojan.Zegost!hlBx9VdhW4A
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_92%
Fortinet	W32/Farfli.UO!tr
AVG	Win32:Malware-gen
Cybereason	malicious.1a9e90
Panda	Trj/Zegost.C
MaxSecure	Trojan.Malware.300983.susgen

How to remove Win32/Farfli.ASD?

Win32/Farfli.ASD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X