Malware

Should I remove “Malware.AI.1103777139”?

Malware Removal

The Malware.AI.1103777139 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Malware.AI.1103777139 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the NetWire malware family

How to determine Malware.AI.1103777139?


File Info:

name: 473B75FD0964B1387DEC.mlw
path: /opt/CAPEv2/storage/binaries/2db8531436b030675a066e1f68e037655b0468781b6daa79f68d69466518a239
crc32: D207034A
md5: 473b75fd0964b1387dec1a1b199adcb0
sha1: ace459add306c95eb619e9fc652fd2a7e921404b
sha256: 2db8531436b030675a066e1f68e037655b0468781b6daa79f68d69466518a239
sha512: 683eeff8af80c0d46b56ba725b89d02b15cb37f80aa84404ab5622ae943446c2e9857e6b20c6a723d53cc9adcf6345c2279a8ec2df2673c1221dc242aadc3377
ssdeep: 24576:kCdxte/80jYLT3U1jfsWat1bCqGhzMOulD85hDQ:1w80cTsjkWat1bCqcQOSg4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AD55CF2273DDC370CB769173BF2A77016EBB78614630B95B2F880D7DA950161262DBA3
sha3_384: 0009139eecbfdf9f9d43a238a558ee90bd07a40a99b395a76658578e75923af0cd18214675ec155d7824b6dc11faa8d6
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2018-05-29 02:56:13

Version Info:

CompanyName: UPD Ltd
FileDescription: Update
FileVersion: 1.2.674.0
InternalName: UPD Ltd
OriginalFilename: v1.exe
ProductName: upd
ProductVersion: 1.2.674.0
Translation: 0x0809 0x04b0

Malware.AI.1103777139 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Autoit.4!c
MicroWorld-eScanAIT:Trojan.Nymeria.795
FireEyeAIT:Trojan.Nymeria.795
ALYacAIT:Trojan.Nymeria.795
MalwarebytesMalware.AI.1103777139
SangforVirus.Win32.Save.a
K7AntiVirusTrojan ( 00532cde1 )
AlibabaTrojan:Win32/Injector.b7cfb2bd
K7GWTrojan ( 00532cde1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.CCCF48AF16
CyrenW32/AutoIt.RL.gen!Eldorado
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Nymeria-6956239-0
KasperskyTrojan.Win32.Autoit.abrix
BitDefenderAIT:Trojan.Nymeria.795
NANO-AntivirusTrojan.Win32.Autoit.fdhtsu
CynetMalicious (score: 100)
AvastFileRepMalware [Misc]
TencentWin32.Trojan.Autoit.Uwhl
Ad-AwareAIT:Trojan.Nymeria.795
SophosTroj/Miner-FK
ComodoMalware@#ib66qeuh3uis
DrWebBackDoor.Siggen2.2331
VIPREAIT:Trojan.Nymeria.795
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.tc
Trapminemalicious.high.ml.score
EmsisoftAIT:Trojan.Nymeria.795 (B)
IkarusTrojan-Spy.HawkEye
GDataAIT:Trojan.Nymeria.795 (2x)
AviraTR/AD.NetWiredRc.sjwde
MAXmalware (ai score=100)
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Malware/Win32.Generic.C2548432
McAfeePacked-FBX!473B75FD0964
VBA32Trojan.Autoit
CylanceUnsafe
FortinetW32/Autoit.ABRIX!tr
AVGFileRepMalware [Misc]
Cybereasonmalicious.d0964b
PandaTrj/CI.A

How to remove Malware.AI.1103777139?

Malware.AI.1103777139 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment