How to remove “Win32/Farfli_AGen.M”?

The Win32/Farfli_AGen.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Farfli_AGen.M virus can do?

• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Farfli_AGen.M?

File Info:
name: 25C3BEEA966FF1EB4B38.mlw
path: /opt/CAPEv2/storage/binaries/f4da0cb1f1cdac395b9c090dfdcc1f21c15dadc1f8745034aed0eaf59f798dac
crc32: B79AE266
md5: 25c3beea966ff1eb4b38ad278bf3af85
sha1: c6798299fdb5a4e483672ed8f25637a9e3046928
sha256: f4da0cb1f1cdac395b9c090dfdcc1f21c15dadc1f8745034aed0eaf59f798dac
sha512: 7c433284cdcc71ff626349b573ba65f73a878c18b6ddb399bea40e385a9c124d41f769c80e4cf12e2f4b006b96a278761d9f114c61f97d78f86af627e3bc56ec
ssdeep: 12288:LC06sBFEoHqjyEtj+JXvRIUz+49HOWQ7ka:LUOFEvIRIUz+4S
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15DC42B20E510D02EF4E261F5C2BB463E79246F38134424CBE3D4AD697BA99E1BD3295F
sha3_384: 2fea6b7d9cc6d6491192522228ca75379c5dae83e4b059ab92d84b3998f815db2251d789749737450631cc576d5fd0eb
ep_bytes: 558bec6aff6828f8460068325d410064
timestamp: 2023-04-20 15:04:21

Version Info:
CompanyName: CODEX
FileDescription: Language Changer
FileVersion: 1.1.0.0
InternalName: languagechanger.exe
LegalCopyright: Copyright ? 2017
LegalTrademarks: CODEX
OriginalFilename: languagechanger.exe
ProductName: Language Changer
ProductVersion: 1.1.0.0
Translation: 0x0804 0x04b0

Win32/Farfli_AGen.M also known as:

How to remove Win32/Farfli_AGen.M?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.