Malware

Should I remove “Malware.AI.1381572919”?

Malware Removal

The Malware.AI.1381572919 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1381572919 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

pastebin.com
ocsp.digicert.com

How to determine Malware.AI.1381572919?


File Info:

crc32: 63BD37F1
md5: 9a61be1c4fbeaf69701d31449709d3e3
name: 9A61BE1C4FBEAF69701D31449709D3E3.mlw
sha1: cce293f8de938070dd65c61dbf71af37c6e6f418
sha256: 1e34afd940b239f3d0f3efa76fe3d4a4e235f626b4f5b01ea62d3840117a8e42
sha512: b36a8e478dfad80c8cc66739dbf6b0aaef7533980bcf2c1ec05c8b80902f025dc245e9f057215cc50223e45d335adfdffa8119e9f9269780eb88455ea8be22cb
ssdeep: 24576:qHpEAIB7yzVWNoNM3s8o0XDoPOZWQABvC2z480fNI:+HzVDM7TDomZuBvX48KK
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Malware.AI.1381572919 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00574b221 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.41883
MicroWorld-eScanGen:Variant.Symmi.93251
CAT-QuickHealTrojan.Skeeyah.J1
ALYacGen:Variant.Symmi.93251
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.69481c3e
K7GWTrojan ( 00574b221 )
Cybereasonmalicious.c4fbea
CyrenW32/Zusy.EM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIRH
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.93251
NANO-AntivirusTrojan.Win32.PackedENT.fijfdo
TencentTrojan.Win32.Kryptik.gify
Ad-AwareGen:Variant.Symmi.93251
SophosMal/Generic-S + Mal/Inject-GJ
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderThetaGen:NN.ZexaF.34266.dDW@ayQfN8c
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Sytro.tc
FireEyeGeneric.mg.9a61be1c4fbeaf69
EmsisoftGen:Variant.Symmi.93251 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cljcq
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASBOL.C62E
MicrosoftVirTool:Win32/CeeInject.AKZ!bit
SUPERAntiSpywareTrojan.Agent/Gen-Razy
GDataGen:Variant.Symmi.93251
TACHYONTrojan/W32.Selfmod
AhnLab-V3Malware/Win32.Generic.C2688557
Acronissuspicious
McAfeePacked-FJB!9A61BE1C4FBE
MAXmalware (ai score=99)
VBA32Trojan.Packed
MalwarebytesMalware.AI.1381572919
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.GenAsa!0xM7zILK7cg
IkarusTrojan.Patched
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1381572919?

Malware.AI.1381572919 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment