Malware

Should I remove “Malware.AI.1351526845”?

Malware Removal

The Malware.AI.1351526845 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1351526845 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Attempts to remove evidence of file being downloaded from the Internet
  • Executed a process and injected code into it, probably while unpacking
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Interacts with known DarkComet registry keys
  • Creates known Fynloski/DarkComet mutexes

How to determine Malware.AI.1351526845?


File Info:

crc32: 2B5E33CD
md5: ec263a1e77b3dfd9d53a71737320443b
name: EC263A1E77B3DFD9D53A71737320443B.mlw
sha1: 923c2d2f695b5f4d40f20ae2df24c4bb392f7e28
sha256: 92282afe1f988e026f765be9c1d247b140a1bd0484ed72cbf009d4cabe433ca7
sha512: 38f4536c77977692d8aed6ac57e388e547d46849c4193ebb1bd706a0c6d1f1eadb56e00a908a1c2f22524c121c85e3aab7ffb955d8f95f3399c52829e5ab0570
ssdeep: 6144:FHwh8M1sg4P5gdIVIDO8P4xotGprhU0pJJ/mCNL4M+G9Kf5WT5acOnwpv1Katfq:ZwF1sgny8AaGpuoJQQJBIwV1Kath3ny
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Malware.AI.1351526845 also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.Comet.152
CynetMalicious (score: 100)
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.1028
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Starter.ali2000005
Cybereasonmalicious.e77b3d
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.AUC
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Blocker.pdx
BitDefenderGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG
NANO-AntivirusTrojan.Win32.FakeAV.dkkfrd
MicroWorld-eScanGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG
TencentWin32.Trojan.Blocker.Akos
Ad-AwareGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG
SophosMal/Generic-S
ComodoMalware@#413l0xdyi5sg
BitDefenderThetaAI:Packer.8B3DED9A26
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.gh
FireEyeGeneric.mg.ec263a1e77b3dfd9
EmsisoftGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Blocker.alp
AviraTR/Dropper.MSIL.Gen
eGambitGeneric.Dropper
KingsoftWin32.Troj.Generic.a.(kcloud)
MicrosoftBackdoor:Win32/Fynloski.A
AegisLabTrojan.Win32.Blocker.j!c
GDataGen:Trojan.Heur3.CTR.303adCmW@aSJaKkhG
TACHYONTrojan/W32.DN-Blocker.471040
AhnLab-V3Trojan/Win32.Jorik.R46448
McAfeeGeneric MSIL.w
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.1351526845
PandaGeneric Malware
RisingRansom.Blocker!8.12A (CLOUD)
IkarusTrojan-Ransom.Blocker
FortinetW32/Blocker.PDX!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HwMAQf0A

How to remove Malware.AI.1351526845?

Malware.AI.1351526845 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment