What is “Malware.AI.1256810110”?

The Malware.AI.1256810110 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1256810110 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.1256810110?


File Info:
name: E02352B2DE66936F4B56.mlw
path: /opt/CAPEv2/storage/binaries/f31ad06e560a82798132a918b8fdef97b7f9e7bacbb72e76e843ef7e5024e2fd
crc32: 4F9CD818
md5: e02352b2de66936f4b56069917afb4a6
sha1: af8b88a308b3b3c75215f33594ed2245e74fb5a2
sha256: f31ad06e560a82798132a918b8fdef97b7f9e7bacbb72e76e843ef7e5024e2fd
sha512: 1e71fdaf18bd89fdb5c5cd7068f94bf262f978b92a105c2d9b4b665995ef4580e17aed9433d461a551ddcb1a0bf41f3ad47492bc44ada3f9b5dabf4f51bd8ae5
ssdeep: 384:MPBZztMHp0Ub4FFSt0mNlM9TvN1pJtB++rgTLdSIbCHcQGx3cqKDmKDhMKDZE0zH:wyHpZb4FdMM1vN1jrgdZC8Zc2o1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D83CB82E253A400FF9805FC9DA5CE60252EBC71B4745E3B229FA16BFA75653741063F
sha3_384: d2d4afc5070388d112a6e727d0a7dbfd2dedde93709c71f899d9a438131fff0022e8e4e094b915b42e2b6552f04f6b6f
ep_bytes: 60be000042008dbe0010feff57eb0b90
timestamp: 2012-09-29 20:38:57

Version Info:
CompanyName: TeraByte Unlimited
FileDescription: BurnCDCC  - Burn a CD/DVD file image to a disc.
FileVersion: 2.02
InternalName: BurnCDCC
LegalCopyright: Copyright © 2004-2006, 2012 TeraByte, Inc.  All Rights Reserved.
LegalTrademarks: BurnCDCC
OriginalFilename: burncdcc.exe
ProductVersion: 2.02
Translation: 0x0409 0x04b0

Malware.AI.1256810110 also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.GenericKD.68566023
ALYac	Trojan.GenericKD.68566023
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKD.68566023
Emsisoft	Trojan.GenericKD.68566023 (B)
VIPRE	Trojan.GenericKD.68566023
McAfee-GW-Edition	BehavesLike.Win32.Generic.mt
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.e02352b2de66936f
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.68566023
MAX	malware (ai score=84)
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Microsoft	Trojan:Win32/Wacatac.B!ml
Acronis	suspicious
Malwarebytes	Malware.AI.1256810110
TrendMicro-HouseCall	TROJ_GEN.R002H09HB23
Ikarus	Trojan-GameThief.Win32.Nilage
Fortinet	W32/ULPM.2C75!tr
Cybereason	malicious.308b3b
DeepInstinct	MALICIOUS

How to remove Malware.AI.1256810110?

Malware.AI.1256810110 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X