How to remove “Malware.AI.1391952056”?

The Malware.AI.1391952056 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1391952056 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Malware.AI.1391952056?


File Info:
name: 7B8DBCF3461D85D86D91.mlw
path: /opt/CAPEv2/storage/binaries/342dd385f7c38b6e4528611fd46c56aafdf347851067eb1dbb24611a7077f1a0
crc32: B9B0BE5D
md5: 7b8dbcf3461d85d86d91c2656b43a6c4
sha1: 3a193691446386b74f18e68cd4400b7ea47eb507
sha256: 342dd385f7c38b6e4528611fd46c56aafdf347851067eb1dbb24611a7077f1a0
sha512: 9d547b0d042171f40fcd6652a757ba646b53bf0f953b482ca4aac1b82a25097dc4fb3bea9e1a0bfbe8aa19923dc3b1413f4b2c089aefacbb9e4d3b62733c0c82
ssdeep: 1536:0jgUBotV2PCLlGrENtBhecFcukzpAlRWRxQe:fUB82PCMoNpDlKAlRCxQe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BF64E51DAAFF001BE45DC2B42FC0E87F4894E73725A5AD342DD84BDA0B58D4479DA23A
sha3_384: c3418cd9216f49e5b18931b22e413aebe8e8165ba3f8cb201580331c8e935b6043ec10fab0cc42539bb8cd536833a5e4
ep_bytes: 6838184000e8f0ffffff000000000000
timestamp: 2011-08-13 08:19:39

Version Info:
Translation: 0x0409 0x04b0
Comments: LrABzEpiqThgwAC
CompanyName: adsNOYidGVpIc
FileDescription: lSkVaAomgyvRoMR
LegalCopyright: qhuFonbMoK
ProductName: LVqEreEbaC
FileVersion: 1.00
ProductVersion: 1.00
InternalName: video
OriginalFilename: video.exe

Malware.AI.1391952056 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Heur.ManBat.1
FireEye	Generic.mg.7b8dbcf3461d85d8
CAT-QuickHeal	Trojan.VB.Gen
Malwarebytes	Malware.AI.1391952056
VIPRE	Gen:Heur.ManBat.1
K7AntiVirus	Trojan ( 0054ec131 )
K7GW	Trojan ( 0054ec131 )
Cybereason	malicious.3461d8
BitDefenderTheta	Gen:NN.ZevbaF.34682.tm1@aCr2Q@bi
Cyren	W32/ABRisk.RJMN-4109
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.HKF
Kaspersky	Trojan.Win32.Agent.zmse
BitDefender	Gen:Heur.ManBat.1
NANO-Antivirus	Trojan.Win32.CFI.jsguna
Cynet	Malicious (score: 100)
APEX	Malicious
Ad-Aware	Gen:Heur.ManBat.1
Emsisoft	Gen:Heur.ManBat.1 (B)
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
Jiangmin	Trojan.Generic.hmmqn
Avira	TR/Crypt.CFI.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Generic.ASMalwS.51F4
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Heur.ManBat.1
Google	Detected
AhnLab-V3	Trojan/Win32.Malco.R7759
Acronis	suspicious
VBA32	BScope.Trojan.VB.01559
ALYac	Gen:Heur.ManBat.1
Avast	Win32:Inject-ALI [Trj]
Rising	HackTool.VBInject!1.6481 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Injector.HKF!tr
AVG	Win32:Inject-ALI [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Malware.AI.1391952056?

Malware.AI.1391952056 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X