How to remove “Malware.AI.1186470977”?

The Malware.AI.1186470977 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1186470977 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.1186470977?


File Info:
name: EB47B27AAFDA217E73A1.mlw
path: /opt/CAPEv2/storage/binaries/9cea3f59259a9086f26d2b6e9b1796ec7a055894b3fe1012ee9f90c8b82cd51a
crc32: B546CDD9
md5: eb47b27aafda217e73a11877491fa557
sha1: 8e3c9386867d94040fc1ec4af333f82cc57194c1
sha256: 9cea3f59259a9086f26d2b6e9b1796ec7a055894b3fe1012ee9f90c8b82cd51a
sha512: 1fedfc0e8c67b93d775dc042674460cf3589f4ed2ffaa613b26ba606151830e03b6823110ddc507819ac27fdcf639427f22a5b167fa4b2a1bf8601aebacc9e19
ssdeep: 49152:3/M0zHv1x/e7+P6Nbc1wBc9yS+98KYI2P/q0I5mI3FbGYsVcpVkhDbMN:vM0L1x/e861cL9J+98KYISqpL1GYlpVJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10FA533875B429723DCD296B23C598FA14F63D52B98BC8F1CB52D859EEB1C812D201F4B
sha3_384: 5c1974f4b45b2aa39a22b3cb6094f27d098ecfb6fc34257ecc1c326415d74a47e4c9f9e136ccde31bd3441cd6f5291bf
ep_bytes: 6a746840314000e8dd02000033db895d
timestamp: 2007-09-21 20:00:53

Version Info:
Comments: 社保核算系统，自2011年1月2日开始进行系统设计，设计思路采用网络C/S模式，服务端使用SQL查询语言，SQL2000数据库系统，客户端使用VFP90系统，数据使用根据用户授权情况分级，登录数据加密保护。最后更新系统时间：2013年03月31日。
CompanyName: 华电新疆公司
FileDescription: 社保管理
LegalCopyright: 许昌勇
LegalTrademarks: 宜阳软件科技
ProductName: 社保核算
FileVersion: 1303.5.1921.0
ProductVersion: 1303.5.1921.0
InternalName: insurance_brown
OriginalFilename: insurance_brown.exe
Translation: 0x0000 0x04b0

Malware.AI.1186470977 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.GenericKD.72450005
FireEye	Generic.mg.eb47b27aafda217e
Skyhigh	BehavesLike.Win32.Generic.vc
McAfee	GenericRXSY-BQ!EB47B27AAFDA
Sangfor	Trojan.Win32.Agent.Vm61
CrowdStrike	win/malicious_confidence_60% (W)
Elastic	malicious (moderate confidence)
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002H06KH23
Avast	Win32:Malware-gen
BitDefender	Trojan.GenericKD.72450005
Emsisoft	Trojan.GenericKD.72450005 (B)
Trapmine	malicious.high.ml.score
MAX	malware (ai score=86)
Google	Detected
Varist	W32/ABRisk.MKZO-1943
Kingsoft	malware.kb.a.984
GData	Trojan.GenericKD.72450005
AhnLab-V3	Trojan/Win.BQ.C5493780
Malwarebytes	Malware.AI.1186470977
SentinelOne	Static AI – Malicious PE
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.1186470977?

Malware.AI.1186470977 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X