Malware

How to remove “Malware.AI.1354457995”?

Malware Removal

The Malware.AI.1354457995 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1354457995 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

How to determine Malware.AI.1354457995?


File Info:

crc32: 7393B550
md5: edcaa727e2736e561d785e46df7a8138
name: EDCAA727E2736E561D785E46DF7A8138.mlw
sha1: 656cb6cd9e8709cc64c5b2ded6868be155d71e15
sha256: fb7fc60b3ec904b33735997efa7ac72c857b004f964524b77ce02871e68607a0
sha512: da1b91cfe951074db1cbdc847ffa997f0063bcece4628fc4e8eba44e0446b9419a9e94745a00715a91f1cd1f1cb0eedc5da4fb21e1f496015ee79b597d1a3644
ssdeep: 24576:6ZYsYJNWlgauWVSuShZW/S7zONx0zqZ4f5/4/31K4COc3YqXd:+cJMggSuSrW/SscAy4E4Cn3tXd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.1354457995 also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
DrWebTrojan.Sdter.40
CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericPMF.S23371339
ALYacGen:Trojan.Heur.orZ@H9kNqkgb
CylanceUnsafe
ZillyaDownloader.Loan.Win32.2
CrowdStrikewin/malicious_confidence_80% (D)
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.7e2736
CyrenW32/Downloader.ULNT-8355
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDropper.Agent.SOI
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Downloader.20341-1
KasperskyTrojan-Downloader.Win32.Loan.a
BitDefenderGen:Trojan.Heur.orZ@H9kNqkgb
NANO-AntivirusTrojan.Win32.Loan.wswt
ViRobotTrojan.Win32.Downloader.2356269
MicroWorld-eScanGen:Trojan.Heur.orZ@H9kNqkgb
TencentMalware.Win32.Gencirc.10b54913
Ad-AwareGen:Trojan.Heur.orZ@H9kNqkgb
SophosMal/Generic-E
ComodoTrojWare.Win32.Downloader.Loan.~A@5eal0
BitDefenderThetaAI:Packer.3B5728751C
TrendMicroTROJ_LOAN.B
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.edcaa727e2736e56
EmsisoftGen:Trojan.Heur.orZ@H9kNqkgb (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojanDownloader.Loan.h
AviraTR/Crypt.XPACK.Gen5
Antiy-AVLTrojan/Generic.ASMalwS.2C8F3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Heur.E6B0E2
GDataGen:Trojan.Heur.orZ@H9kNqkgb
AhnLab-V3Trojan/Win32.OnlineGameHack.R48689
McAfeeGenericRXDN-CE!EDCAA727E273
MAXmalware (ai score=84)
VBA32BScope.TrojanDownloader.Loan
MalwarebytesMalware.AI.1354457995
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_LOAN.B
RisingTrojan.Generic@ML.93 (RDMK:hl+6HA0Q/poFJ7RWBSF5kQ)
YandexTrojan.DL.Loan!A70NC6M03ss
IkarusTrojan-Downloader.Win32.Loan
FortinetW32/Generic.AC.25CAAE!tr
AVGWin32:Malware-gen

How to remove Malware.AI.1354457995?

Malware.AI.1354457995 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment