Categories: Malware

Win32/Farfli.BS removal instruction

The Win32/Farfli.BS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Farfli.BS virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Unconventionial binary language: Chinese (Simplified)
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

rydachao.xicp.net

How to determine Win32/Farfli.BS?


File Info:
crc32: F29B4A83md5: 200d0e33b836f82ec063eb3c44db4e88name: 200D0E33B836F82EC063EB3C44DB4E88.mlwsha1: 559ed291b96bc7b6b88543b8f858768326a2990dsha256: dcb1cdbf627bdc168d697361c764ff68161eb2ceabc378817af718299a53536bsha512: c31ffe6217005789fbe3a94e74f0f35f129d5b7b6d1602ba818fb3285af9f417ec335c242c21b6d7077e1a122a3776fe52b94fdf18a59397ccd9c59cbf7b200bssdeep: 1536:2y0/KN5J/yFros3t51Tn3ZQ2cY3nf4tUriapGlMe4Io4Wf:2yNz/iroK1T3ZQ2/3f4tUriaaL4Io4mtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: (C) 360.cn All Rights Reserved.InternalName: 360AvFlt.dllFileVersion: 1.1.0.1015CompanyName: 360.cnPrivateBuild: LegalTrademarks: Comments: ProductName: 360x6740x6bd2SpecialBuild: ProductVersion: 1.1.0.1015FileDescription: 360x6740x6bd2 x6587x4ef6x76d1x63a7x9a71x52a8OriginalFilename: 360AvFlt.dllTranslation: 0x0804 0x04b0

Win32/Farfli.BS also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject1.23956
FireEye	Generic.mg.200d0e33b836f82e
McAfee	GenericRXAI-IW!200D0E33B836
Cylance	Unsafe
VIPRE	Trojan.Win32.Redosdru.C (v)
Sangfor	Malware
K7AntiVirus	Backdoor ( 005203371 )
K7GW	Backdoor ( 005203371 )
Cybereason	malicious.1b96bc
BitDefenderTheta	Gen:NN.ZexaF.34804.gq1@aenK!vgi
Cyren	W32/Trojan.IM1.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Jorik.Zegost.vww
NANO-Antivirus	Trojan.Win32.Jorik.crdvoo
Tencent	Win32.Trojan.Jorik.Hlxt
TACHYON	Trojan/W32.Jorik.104466
Comodo	TrojWare.Win32.Farfli.AC@53r0u7
F-Secure	Heuristic.HEUR/AGEN.1124186
Baidu	Win32.Trojan.Farfli.ai
Zillya	Trojan.Jorik.Win32.228626
McAfee-GW-Edition	GenericRXAI-IW!200D0E33B836
Sophos	Mal/Generic-S
Ikarus	Backdoor.Win32.Inject
Jiangmin	Heur:Backdoor/Ghost
Avira	HEUR/AGEN.1124186
Antiy-AVL	Trojan/Win32.Zegost
Kingsoft	Win32.HeurC.KVM005.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Jorik.Zegost.vww
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R103133
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Farfli.BS
Rising	Malware.Undefined!8.C (TFE:5:CYvp9E2zNbQ)
Yandex	Trojan.Zegost!x10l80L+Wb0
SentinelOne	Static AI – Malicious PE – Spyware
eGambit	Trojan.Generic
Fortinet	W32/Farfli.AIL!tr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.fbd