Malware

How to remove “Malware.AI.1232180268”?

Malware Removal

The Malware.AI.1232180268 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1232180268 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.1232180268?


File Info:

name: 14F4D11D906134B9923A.mlw
path: /opt/CAPEv2/storage/binaries/f3f3fd770bfed68983d609059d37f4f629b1e318fa3aac95a4f18ddae1f8fe1f
crc32: DD070779
md5: 14f4d11d906134b9923a63b7248d74ac
sha1: 96745e8ab18bbb527349b3063a8992ef7f503c06
sha256: f3f3fd770bfed68983d609059d37f4f629b1e318fa3aac95a4f18ddae1f8fe1f
sha512: 3bbaff532c1c82ef2e43393e2284e82f7a832fa608241178c6d75d645342a335b66e18d7141c6fc3a57c560ed89f262b55bf9457611e9b79ee44aa9cab80a990
ssdeep: 384:59Bau/zqn6jx7mOmgIBPEyEr/KMww+dZcj8P36DwGmU/IQB:59Bau/zu878TDokYwGd/
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AF435143AADCBCCAC13893B07B7BC7D0C70DED6849A1C51EA1C1369A94BC153B9527E8
sha3_384: e95fb61c7ebb380ac7a1c9307934325c6aa5f7b83dc6102931bff47f4871e23d61e177a7048c06de1a312bc01b90ec54
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2021-07-29 01:39:39

Version Info:

0: [No Data]

Malware.AI.1232180268 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Johnnie.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Johnnie.257241
FireEyeGen:Variant.Johnnie.257241
ALYacGen:Variant.Johnnie.257241
CylanceUnsafe
SangforRiskware.Win32.Wacapew.C
CyrenW32/Trojan.NJDM-5572
SymantecML.Attribute.HighConfidence
BitDefenderGen:Variant.Johnnie.257241
AvastWin32:TrojanX-gen [Trj]
Ad-AwareGen:Variant.Johnnie.257241
SophosGeneric PUA JG (PUA)
TrendMicroTROJ_GEN.R067C0PHA21
McAfee-GW-EditionGenericRXPM-WK!14F4D11D9061
EmsisoftGen:Variant.Johnnie.257241 (B)
GDataGen:Variant.Johnnie.257241
JiangminTrojan.Johnnie.bv
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R437813
McAfeeGenericRXPM-WK!14F4D11D9061
MAXmalware (ai score=85)
MalwarebytesMalware.AI.1232180268
TrendMicro-HouseCallTROJ_GEN.R067C0PHA21
RisingMalware.Heuristic!ET#92% (RDMK:cmRtazp7sCi85WGWRrwqLpwKQ2X9)
IkarusTrojan.Win32.Swrort
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:TrojanX-gen [Trj]
PandaTrj/GdSda.A

How to remove Malware.AI.1232180268?

Malware.AI.1232180268 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment