Malware

Malware.AI.1064302717 removal guide

Malware Removal

The Malware.AI.1064302717 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1064302717 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Checks for the presence of known windows from debuggers and forensic tools
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics

How to determine Malware.AI.1064302717?


File Info:

crc32: B7D080DA
md5: 2e15ee8c9f4e8d2b616b6cd50c86984c
name: 2E15EE8C9F4E8D2B616B6CD50C86984C.mlw
sha1: 3323662f7578c35b7e4ecd062e7f4ae56f81bf81
sha256: 033cd35565e72ab711c526a70e55493e9977e2a2dc17b54a4329a9371f4cdbcc
sha512: 8413f5d4bf40a5b566995dbb771a87bac4f46a47033406873707f2d00d7407b6eb1b093c0effab40709fb17b2972081bbba10eb8c87c19c89eb010abd90db110
ssdeep: 1536:Hca9Nlw+z1Z4IiCGKhF07Mlfvr3Jv9TRVpamyW3EJSLdIb:8a98k1QhKhFoMlfvr3vpESdIb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.02.0006
InternalName: tops
FileVersion: 1.02.0006
OriginalFilename: tops.exe
ProductName: pr1

Malware.AI.1064302717 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0055e3df1 )
LionicWorm.Win32.VBNA.meIH
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop2.62640
CynetMalicious (score: 100)
ALYacGen:Trojan.Heur.em3@sfIhAjjku
CylanceUnsafe
ZillyaWorm.VBNA.Win32.150493
SangforWorm.Win32.VBNA.ky
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaWorm:Win32/VBDrop.cc244427
K7GWTrojan ( 0055e3df1 )
Cybereasonmalicious.c9f4e8
CyrenW32/Trojan.RMGW-4510
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDropper.VB.FD
APEXMalicious
AvastWin32:Zbot-LTM [Trj]
ClamAVWin.Trojan.Agent-410341
KasperskyWorm.Win32.VBNA.c
BitDefenderGen:Trojan.Heur.em3@sfIhAjjku
NANO-AntivirusTrojan.Win32.Agent.dxvecj
MicroWorld-eScanGen:Trojan.Heur.em3@sfIhAjjku
TencentMalware.Win32.Gencirc.10bf8ac3
Ad-AwareGen:Trojan.Heur.em3@sfIhAjjku
SophosMal/Generic-R + Troj/VBDrop-M
ComodoMalware@#2h9cchhvbtlhb
BitDefenderThetaAI:Packer.06436D3C1D
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroMal_Repyh
McAfee-GW-EditionBehavesLike.Win32.Rontokbro.lh
FireEyeGeneric.mg.2e15ee8c9f4e8d2b
EmsisoftGen:Trojan.Heur.em3@sfIhAjjku (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.186FCE4
MicrosoftTrojan:Win32/VB
GDataGen:Trojan.Heur.em3@sfIhAjjku
AhnLab-V3Worm/Win32.VBNA.R9049
McAfeeArtemis!2E15EE8C9F4E
MAXmalware (ai score=99)
VBA32SScope.Trojan.VBO.0314
MalwarebytesMalware.AI.1064302717
PandaTrj/CI.A
TrendMicro-HouseCallMal_Repyh
RisingTrojan.VBInject!1.6541 (CLASSIC)
YandexTrojan.GenAsa!OcfMMN1GDQg
IkarusTrojan-Downloader.Win32.Kaizer
FortinetW32/Generic.AC.458491
AVGWin32:Zbot-LTM [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1064302717?

Malware.AI.1064302717 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment