Malware

Malware.AI.1060069450 removal

Malware Removal

The Malware.AI.1060069450 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1060069450 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.1060069450?


File Info:

name: 655DEDEC8F79B759573A.mlw
path: /opt/CAPEv2/storage/binaries/ca4b12f45331261ff1f721a849368bf76e059a9c927c8b3f42bcd177d71d4f51
crc32: AC734584
md5: 655dedec8f79b759573ac91c86a008f6
sha1: 0938743a9e1197f878c5f12f6fde8f1d75ee4773
sha256: ca4b12f45331261ff1f721a849368bf76e059a9c927c8b3f42bcd177d71d4f51
sha512: 4eeb5dc8baa769dc9121126ae615a4a138898015f454e0a50b490edde4934a533f2d5cb5243d634fd886ee738e2eb9bf6bd6600ffe90f7051b3829b095ecfa35
ssdeep: 768:INCG5v4/sgz0YqNoTWmMX4L6OgiLvc4KE1vsRP8Y6qnbcuyD7UiX:INCG5usMSoT/AkdmRP8Y6qnouy8e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8D2D077A2BA9AECC42D1036C5E5E40B4C04F25DA790DF766AD0367BFC43F55091EA82
sha3_384: 643176bbae510b20eed8265ff8f3f603cb1f0009c60520d5a55bf0e2a0411dd145982e8d2fca52ca1533d1bf4621e59f
ep_bytes: 60be00c040008dbe0050ffff5789e58d
timestamp: 2012-03-28 06:32:46

Version Info:

0: [No Data]

Malware.AI.1060069450 also known as:

Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Generic.7651513
FireEyeGeneric.mg.655dedec8f79b759
ALYacTrojan.Generic.7651513
CylanceUnsafe
ZillyaTrojan.Genome.Win32.191779
K7AntiVirusTrojan ( 00072a121 )
K7GWTrojan ( 00072a121 )
Cybereasonmalicious.c8f79b
BaiduWin32.Trojan.Taojin.b
VirITTrojan.Win32.Generic.DFF
CyrenW32/GenTroj.AO.gen!Eldorado
ESET-NOD32Win32/TaojinStar.B
APEXMalicious
ClamAVWin.Trojan.Genome-10748
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Generic.7651513
NANO-AntivirusTrojan.Win32.TaojinStar.bbkhnq
AvastWin32:Malware-gen
TencentTrojan.Win32.Agent.eei
Ad-AwareTrojan.Generic.7651513
EmsisoftTrojan.Generic.7651513 (B)
ComodoTrojWare.Win32.Karnos.F@4qq9i0
F-SecureTrojan.TR/Fednu.mek
DrWebTrojan.Click2.41127
VIPRETrojan.Generic.7651513
McAfee-GW-EditionGeneric PWS.hu
Trapminesuspicious.low.ml.score
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Generic.7651513
JiangminTrojan/Genome.cidk
AviraTR/Fednu.mek
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Genome
ArcabitTrojan.Generic.D74C0B9
SUPERAntiSpywareTrojan.Agent/Gen-Conjar
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
McAfeeArtemis!655DEDEC8F79
VBA32Trojan.Genome.ag
MalwarebytesMalware.AI.1060069450
RisingTrojan.Win32.Fednu.uif (CLASSIC)
YandexTrojan.GenAsa!pIPZXk3ZeQM
IkarusTrojan.SuspectCRC
FortinetW32/TaojinStar.B!tr
BitDefenderThetaGen:NN.ZexaF.34806.bmHfaSPGeVni
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.1060069450?

Malware.AI.1060069450 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment