Malware

Win32/Farfli.BUV removal tips

Malware Removal

The Win32/Farfli.BUV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Farfli.BUV virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Farfli.BUV?


File Info:

crc32: 3105D1DA
md5: 02e54f14db353563b61d92d514a1afe5
name: 02E54F14DB353563B61D92D514A1AFE5.mlw
sha1: 1785717e940d0594cfaf09bac896be54cbc0ba64
sha256: b467ad7440fad7972db988a5684817b2a9cf81ae7ab2851a02807967738fd6da
sha512: a8d5e4b2e6fe9056c954fd9e21d9f03fd12b6721457ef56f802acd8808ae04e0abcfff33cbd4b710997e7135c6c52537981b4fa7206b9a42d46b13e5381e0f80
ssdeep: 192:fp3c0LIJrTfjNu3gHwm6EYUQVHmUBvfY6rXa5KCxNP1oynmeoybM+KscAXrE:BsxnNmJnEXQNmg25KCx514zJ+TXg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Farfli.BUV also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader21.26961
MicroWorld-eScanGen:Variant.TeslaCrypt.6
ALYacGen:Variant.TeslaCrypt.6
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
Cybereasonmalicious.4db353
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Farfli.BUV
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.TeslaCrypt.6
NANO-AntivirusVirus.Win32.Gen.ccmw
TencentWin32.Backdoor.Farfli.Gbt
Ad-AwareGen:Variant.TeslaCrypt.6
SophosMal/Generic-S
BitDefenderThetaAI:Packer.335908E01F
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXEM-VL!02E54F14DB35
FireEyeGeneric.mg.02e54f14db353563
EmsisoftGen:Variant.TeslaCrypt.6 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1118111
eGambitTrojan.Generic
Antiy-AVLTrojan/Generic.ASMalwS.1788F34
ArcabitTrojan.TeslaCrypt.6
GDataGen:Variant.TeslaCrypt.6
AhnLab-V3Malware/Gen.Generic.C1325353
Acronissuspicious
McAfeeGenericRXEM-VL!02E54F14DB35
MAXmalware (ai score=80)
VBA32BScope.Trojan.Sasfis
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.100 (RDML:TWQpzY1Gs6VsCu2mJtIw8w)
YandexTrojan.GenAsa!HZDAUzXKGRE
IkarusTrojan.Win32.Pincav
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Farfli.BUV!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Win32/Farfli.BUV?

Win32/Farfli.BUV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment