Malware.AI.1161743729 removal tips

The Malware.AI.1161743729 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1161743729 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.1161743729?


File Info:
name: F5D8E9CDB46759C46906.mlw
path: /opt/CAPEv2/storage/binaries/7381082b0d1a612582c70f080047f365045441e92afbb968b5d9f5cebdff25dd
crc32: 910F1877
md5: f5d8e9cdb46759c469067deb5af541bf
sha1: 67a7a4344a806ae6fdf21355deaa145a43fcc710
sha256: 7381082b0d1a612582c70f080047f365045441e92afbb968b5d9f5cebdff25dd
sha512: 3484158fb401134b45647e2707a4f78c76b656bbc3fe996ec0606cbbf3405b4fc61c14ded77d9a70ad6ef17dad1e3b25412a7d52ee1babcbe3775f5488cd1acc
ssdeep: 12288:CdxTc7mR3XznjAYilDcUsDnlRyNhU4BhLetJPRAg:Cddc7TrTqnl2leb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T110A402923678C62BC83F42FAFDA5A15643B63482243CD5BC9ED698DD49D4F181E84E33
sha3_384: 537649050a046f530bb1242cd424f0bdd152796960767efb45ecb22150c50ca03515feaa5d6b9c033e577446a28f74e9
ep_bytes: ff250020400000000000000000000000
timestamp: 2067-06-18 02:29:38

Version Info:
Translation: 0x0000 0x04b0
Comments: Gagne de la crypto facilement et rapidement
CompanyName: RubyCryptoDev
FileDescription: Ruby
FileVersion: 1.9.9.9
InternalName: Ruby.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: RubyCrypto
OriginalFilename: Ruby.exe
ProductName: Ruby
ProductVersion: 1.9.9.9
Assembly Version: 1.7.6.8

Malware.AI.1161743729 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.MSIL.Bobik.l!c
MicroWorld-eScan	Gen:Variant.Lazy.182613
FireEye	Gen:Variant.Lazy.182613
ALYac	Gen:Variant.Lazy.182613
Cylance	Unsafe
VIPRE	Gen:Variant.Lazy.182613
Sangfor	Trojan.Msil.Agent.Vepe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34606.Dm0@auHz3ag
Cyren	W32/ABRisk.WJJK-2110
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	MSIL/TrojanDownloader.Agent.MRU
Paloalto	generic.ml
Kaspersky	UDS:Trojan-Spy.MSIL.Bobik.gen
BitDefender	Gen:Variant.Lazy.182613
Avast	Win32:Malware-gen
Tencent	Msil.Trojan-downloader.Agent.Efau
Ad-Aware	Gen:Variant.Lazy.182613
Zillya	Downloader.Agent.Win32.483345
TrendMicro	TROJ_GEN.R03BC0PEG22
McAfee-GW-Edition	RDN/Generic PWS.y
Emsisoft	Gen:Variant.Lazy.182613 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Lazy.182613
Google	Detected
Avira	HEUR/AGEN.1248933
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.687D
Arcabit	Trojan.Lazy.D2C955
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.PWS.C5150780
McAfee	RDN/Generic PWS.y
Malwarebytes	Malware.AI.1161743729
TrendMicro-HouseCall	TROJ_GEN.R03BC0PEG22
Rising	Trojan.Generic/MSIL@AI.96 (RDM.MSIL:daHTqzLphPG2icm/GAHdfA)
Ikarus	Trojan-Downloader.MSIL.Agent
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
Cybereason	malicious.44a806

How to remove Malware.AI.1161743729?

Malware.AI.1161743729 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X