Malware

Malware.AI.1290969007 malicious file

Malware Removal

The Malware.AI.1290969007 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1290969007 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.1290969007?


File Info:

crc32: E9842921
md5: 03fe5ee64c51951afe6b32b3bf480695
name: 03FE5EE64C51951AFE6B32B3BF480695.mlw
sha1: 4d3eadf5365f5447664c9659c4036b1e4a84a4cf
sha256: 24a12a484997f86380578ee6bf055321e6a7fdbb311d5f2de5faff27efb3542b
sha512: 6dc36e0882aaaeae090acbc8437a2009d5bd848ae0fffe02c658516cb346cba8abca1045ff5b81ea63baef34eb6ac179461ab0c89502c12ebc53f4e1f77b18b9
ssdeep: 24576:V0vDnOPRn/iuxGip02u4/R2queZyoFlPheCc0q8d8HYVrC6dPrlKCCqPhqprVeG:V0sQ+qqueZywlPheCc0v84VjdzlKyP4
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2010 Valve Corporation
Assembly Version: 2.59.12.64
InternalName: Steam.exe
FileVersion: 2.59.12.64
CompanyName: Valve Software
Comments: Steam Client Bootstrapper
ProductName: Steam
ProductVersion: 2.59.12.64
FileDescription: Steam Client Bootstrapper
OriginalFilename: Steam.exe

Malware.AI.1290969007 also known as:

K7AntiVirusPassword-Stealer ( 0050aeb71 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Steam.13655
CynetMalicious (score: 99)
ALYacGen:Variant.Strictor.67932
CylanceUnsafe
ZillyaTrojan.Steam.Win32.3345
SangforPUP.Win32.Strictor.67932
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Generic.19c79145
K7GWPassword-Stealer ( 0050aeb71 )
Cybereasonmalicious.64c519
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/PSW.Steam.SP
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Agent.gen
BitDefenderGen:Variant.Strictor.67932
NANO-AntivirusTrojan.Win32.Steam.eyajyz
MicroWorld-eScanGen:Variant.Strictor.67932
TencentMalware.Win32.Gencirc.114cec10
Ad-AwareGen:Variant.Strictor.67932
SophosMal/Generic-S
ComodoMalware@#gali16lkjatl
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionGenericRXEA-NB!03FE5EE64C51
FireEyeGeneric.mg.03fe5ee64c51951a
EmsisoftGen:Variant.Strictor.67932 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1128554
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Strictor.67932
AhnLab-V3Malware/Win32.Generic.C1360302
McAfeeGenericRXEA-NB!03FE5EE64C51
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.1290969007
PandaTrj/GdSda.A
YandexTrojan.PWS.Steam!Uxl+CBY6QyQ
IkarusTrojan.MSIL.PSW
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Generic.AP.BF3F6!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1290969007?

Malware.AI.1290969007 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment