Malware

Malware.AI.1146614119 malicious file

Malware Removal

The Malware.AI.1146614119 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1146614119 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • At least one process apparently crashed during execution
  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.1146614119?


File Info:

name: 95CA4D62805B5AAB9529.mlw
path: /opt/CAPEv2/storage/binaries/8557eff251ddd6467b6b387022ab83fd556e986d56279fc1afa37af4e5ec0f12
crc32: 964B7C1F
md5: 95ca4d62805b5aab9529cb7eae1335c0
sha1: 6d0ffb2fcf2ee883f9d387affdd0bb594da27f61
sha256: 8557eff251ddd6467b6b387022ab83fd556e986d56279fc1afa37af4e5ec0f12
sha512: 83ca2bdd0a157479e0e1029758c41382c0e2dd342f98c28f28d95361898f5f6d30092b0def4aaab1bbff9e9bde1bb906c68611d66bec1067bbb4abee88e169f2
ssdeep: 49152:iWoYp3wW4qUlOKLh82zICTTQiqBcmZLyzG9Vyc0368Q:sYqlOKLhNNK+m9VB0368Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12CB533327AB756E6E178437247A1C4C4E978402E6CA7CC030C68C8D9EF75CDD5AAE678
sha3_384: 623ea74dec092be03817581e472aa867ce644cd175dac5a5f1b57722f89359997e3abe6b77fe350f29078eed482cd34d
ep_bytes: 31f6e8040000005ec20c006a0e6affff
timestamp: 2008-01-11 11:58:27

Version Info:

0: [No Data]

Malware.AI.1146614119 also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanGen:Trojan.UserStartup.xoZ@a04OFbh
McAfeePWS-Zbot.gen.auz
CylanceUnsafe
VIPREGen:Trojan.UserStartup.xoZ@a04OFbh
SangforTrojan.Win32.Save.a
K7AntiVirusSpyware ( 000d74261 )
K7GWSpyware ( 000d74261 )
Cybereasonmalicious.2805b5
CyrenW32/Zbot.AC.gen!Eldorado
SymantecTrojan.Zbot!gen3
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Zbot.WQ
APEXMalicious
KasperskyTrojan-Spy.Win32.Zbot.gen
BitDefenderGen:Trojan.UserStartup.xoZ@a04OFbh
AvastWin32:Zbot-MSC [Trj]
Ad-AwareGen:Trojan.UserStartup.xoZ@a04OFbh
EmsisoftGen:Trojan.UserStartup.xoZ@a04OFbh (B)
ComodoTrojWare.Win32.Spy.Zbot.AAO@1ox40p
DrWebTrojan.PWS.Panda.122
ZillyaTrojan.Zbot.Win32.203614
TrendMicroMal_Zbot-2
McAfee-GW-EditionBehavesLike.Win32.ZBot.vc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.95ca4d62805b5aab
SophosML/PE-A + Mal/Zbot-O
IkarusPacked.Win32.Katusha
GDataGen:Trojan.UserStartup.xoZ@a04OFbh
AviraTR/Dropper.Gen
MAXmalware (ai score=85)
Antiy-AVLTrojan/Generic.ASMalwS.31
ArcabitTrojan.UserStartup.ECD1B88
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Zbot.SIBC21!MTB
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Zbot2.Gen
Acronissuspicious
VBA32BScope.Malware-Cryptor.Win32.Vals.11
ALYacGen:Trojan.UserStartup.xoZ@a04OFbh
MalwarebytesMalware.AI.1146614119
TrendMicro-HouseCallMal_Zbot-2
RisingBackdoor.Win32.Ntos.fv (CLASSIC)
YandexTrojanSpy.ZBot.Gen!Pac.8
SentinelOneStatic AI – Malicious PE
FortinetW32/Zbot.gen!tr
BitDefenderThetaAI:Packer.6888EAF71E
AVGWin32:Zbot-MSC [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.1146614119?

Malware.AI.1146614119 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment