Malware

Malware.AI.1158970203 removal guide

Malware Removal

The Malware.AI.1158970203 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1158970203 virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1158970203?


File Info:

name: 55A586B9DBC32D13C749.mlw
path: /opt/CAPEv2/storage/binaries/76ce4bfe322bdaa32fb479857865f3a719dd0794f19049e87e3e87bcd8f9fabd
crc32: 9B446D98
md5: 55a586b9dbc32d13c7491fd65721a4a6
sha1: 168cb9084df46678df746ba2df8c483fda17cfc9
sha256: 76ce4bfe322bdaa32fb479857865f3a719dd0794f19049e87e3e87bcd8f9fabd
sha512: 1af2cf66cd84476eb538288fcc2a3d5d384066a50a557fefe4707bde9bc10850273a9191a445dd850f93834eeb76371c34b3b513d4e0f5528a428f95ff159941
ssdeep: 24576:85PK8YPFIBmSxiPp5PXV98EOTxoyZIjzmm9DkZcvDRf7:GKdMFQPp59bOT5ijzpvvN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T126653347C72044BBFBD552767B31E0C66BBAE91034CC2AC76259DA83B1D5013EA8E973
sha3_384: 038b528a7a14e7282eb080f75152be519db983bf97ff1a3534f00ffa1194ae327a4d39670551f86590896dd1839577ca
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2020-08-01 02:44:50

Version Info:

Comments: CCleaner
CompanyName: Piriform Ltd
FileDescription: CCleaner
FileVersion: 5.63.0.7540
InternalName: ccleaner
LegalCopyright: Copyright © 2005-2019 Piriform Ltd
OriginalFilename: ccleaner.exe
ProductName: CCleaner
ProductVersion: 5.63.0.7540
SpecialBuild: Compile_2019_1014_190816
Translation: 0x0409 0x04b0

Malware.AI.1158970203 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38131053
FireEyeGeneric.mg.55a586b9dbc32d13
ALYacTrojan.GenericKD.38131053
CylanceUnsafe
ZillyaBackdoor.Agent.Win32.82178
K7AntiVirusTrojan ( 005828c71 )
K7GWTrojan ( 005828c71 )
Cybereasonmalicious.84df46
ESET-NOD32a variant of Win32/Packed.NSISmod.AY suspicious
TrendMicro-HouseCallTROJ_GEN.R002H07KU21
KasperskyVHO:Backdoor.Win32.Agent.gen
BitDefenderTrojan.GenericKD.38131053
AvastWin32:Malware-gen
Ad-AwareTrojan.GenericKD.38131053
EmsisoftTrojan.GenericKD.38131053 (B)
McAfee-GW-EditionBehavesLike.Win32.Browser.tc
SophosMal/Generic-S
GDataTrojan.GenericKD.38131053
MAXmalware (ai score=80)
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Generic.D245D56D
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.C4629929
McAfeeArtemis!55A586B9DBC3
VBA32Backdoor.Agent
MalwarebytesMalware.AI.1158970203
APEXMalicious
RisingTrojan.HiddenRun/NSIS!1.D9A8 (CLASSIC)
eGambitUnsafe.AI_Score_98%
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.1158970203?

Malware.AI.1158970203 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment