How to remove “Malware.AI.1105221148”?

The Malware.AI.1105221148 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1105221148 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1105221148?


File Info:
name: A87A710ECA7BAD3C8036.mlw
path: /opt/CAPEv2/storage/binaries/a7dc45df035e39970b23d785d0bf1c49097cab94118fb752a3261fa5c2d42b1b
crc32: EF32B371
md5: a87a710eca7bad3c80369a8c8b919d45
sha1: cff8e3e1310af622004696c93cde30db2e899740
sha256: a7dc45df035e39970b23d785d0bf1c49097cab94118fb752a3261fa5c2d42b1b
sha512: b0a9e66b40106d15022b66c956eed0a448fea42ba325574e197b98de8f1377210a115b69ae808309ca246171855ac331cfb2a7d026aeb3365af8e9a53dbc433c
ssdeep: 12288:Fbyfs5GfUsVdOZmvick2BsP1chRTIiqMvtE2ywLkH7Kkd:F+fsYjwmOP1chtIi9vtELekH7K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T144957C2166009035F9E314B28DBEBBAD595CB86117C920C7E3C85DAE1FA69F27F3411B
sha3_384: e622f3d14638bd2f184d18ca2861550616aada534a9e0deea49d66f0539b049b9b7c6cae4164b12e22a1e2e3aabbf07f
ep_bytes: 5dc20400cc558bec6aff68a0dc460064
timestamp: 2014-03-08 19:27:40

Version Info:
0: [No Data]

Malware.AI.1105221148 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Graftor.4!c
MicroWorld-eScan	Gen:Variant.Graftor.283648
FireEye	Generic.mg.a87a710eca7bad3c
ALYac	Gen:Variant.Graftor.283648
Cylance	Unsafe
Sangfor	Virus.Win32.Save.a
Cybereason	malicious.eca7ba
BitDefenderTheta	Gen:NN.ZexaF.34606.1rZ@aaBYf6b
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
BitDefender	Gen:Variant.Graftor.283648
Avast	Win32:MiniDuke-G [Trj]
Ad-Aware	Gen:Variant.Graftor.283648
Emsisoft	Gen:Variant.Graftor.283648 (B)
VIPRE	Gen:Variant.Graftor.283648
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Sophos	Generic PUA MP (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.283648
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Graftor.D45400
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1105221148
TrendMicro-HouseCall	TROJ_GEN.R002H09HO22
Rising	Trojan.Generic@AI.82 (RDML:lOfwchTdF07whSuxbDF+QQ)
AVG	Win32:MiniDuke-G [Trj]

How to remove Malware.AI.1105221148?

Malware.AI.1105221148 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X