How to remove “Malware.AI.131812661”?

The Malware.AI.131812661 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.131812661 virus can do?

Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.131812661?


File Info:
name: AF05FC1DE05A5E8CBAC1.mlw
path: /opt/CAPEv2/storage/binaries/fc3f9faa81079cb03835de48993c7c8a4aee1f80b1b1df652d7988da700b7099
crc32: 08ADF725
md5: af05fc1de05a5e8cbac1a77b6b99b604
sha1: 0f02132bf5d0217bafdae4ab5545b4e5a02b0902
sha256: fc3f9faa81079cb03835de48993c7c8a4aee1f80b1b1df652d7988da700b7099
sha512: a8a428610f0b74bc2f427b66aebb120b8289e47f4bca846dc56f31d349f6fc4437ab0b85b0381e048afb8f6a9cf88166338fe85838ee348cea7b0288dd6799a0
ssdeep: 24576:Cnl9+SFjPnl9+SmEpQQJvKPzvYZHTHy7RLfUk:BSoSPKPzvoS7RLfU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T104957C12BA488471CD2E0E309515A631FB797C6FBE2E724BAF90B71A1D736C17E21613
sha3_384: 25b62c2a3ed595c764e0195522782cae021d57ca03452055e0b742eedc64600121d5c1ec8ed6bb21793fb2a844c287aa
ep_bytes: e844fdffffe98efeffff558bec6a00ff
timestamp: 2018-02-07 08:05:09

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Word Converter
FileVersion: 16.0.9001.2171
InternalName: WordConv
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: WordConv.exe
ProductName: Microsoft Office 2016
ProductVersion: 16.0.9001.2171
MOSEVersion: BETA
SDClient: _qcloud2
Translation: 0x0000 0x04e4

Malware.AI.131812661 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Ipamor.CI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ClamAV	Win.Dropper.Ausiv-9876732-0
Rising	Trojan.Kryptik!1.B239 (CLASSIC)
McAfee-GW-Edition	BehavesLike.Win32.Expiro.tm
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Packed.Krap.gvuo
Avira	HEUR/AGEN.1141290
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!AF05FC1DE05A
Malwarebytes	Malware.AI.131812661
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.1141!tr
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Malware.AI.131812661?

Malware.AI.131812661 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X