Categories: Malware

Malware.AI.1441907235 removal instruction

The Malware.AI.1441907235 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1441907235 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1441907235?


File Info:
name: 15923D01742A0FEFF178.mlwpath: /opt/CAPEv2/storage/binaries/14941cd7d5482265cf7a4a3bdfdc7118de8b97f727991f2672cadd4cb18d4a9fcrc32: DCB67BDAmd5: 15923d01742a0feff1785efb8aaaa7acsha1: d5d3e222d5f00f790c586f24772bd5eede20a69dsha256: 14941cd7d5482265cf7a4a3bdfdc7118de8b97f727991f2672cadd4cb18d4a9fsha512: 776964377f08e639b2cc1e759a8f8170ef3974654a0a85692671e252a37872285c80ffab8e782d4f9c01e3c7369eaf8d3d8d228286b90dbdbce9b6f91d39f9c2ssdeep: 12288:gDWmReYn7lU/R4dpWWZ+0SxyGzmYMJZTNaWxAfAlG1BiO:W1ReYn7S/RUpWWZooLaWE1Btype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T145A42351F9A58DD8E1720C3A0A9B4C939309A0661A567BFF219C3CE93F060D4DE7B1B7sha3_384: a575eaac5109c55bee826ee105fb9aa18a380a168fd86874bd91ff262c82f80f57392ca9e8c45e7b4a49eb4b4fa9d4ebep_bytes: 60e803000000e9eb045d4555c3e80100timestamp: 2015-11-09 14:13:10
Version Info:
FileVersion: 1.1.73.88FileDescription: 丝绸帮帮辅助软件ProductName: Timo HelpProductVersion: 1.1.73.88CompanyName: TimoLegalCopyright: Copyright sro.diezw.com 2015

内部版本号 CN_BU_ROME_KB_1_88Comments: Timo HelpTranslation: 0x0804 0x04b0

Malware.AI.1441907235 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.202387
FireEye	Generic.mg.15923d01742a0fef
ALYac	Gen:Variant.Zusy.202387
Cylance	Unsafe
Zillya	Trojan.Gotango.Win32.219
Sangfor	Trojan.Win32.Gotango.vrr
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Gotango.934d980c
BitDefenderTheta	Gen:NN.ZexaF.34182.Dy0baKMyERjH
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Gotango.vrr
BitDefender	Gen:Variant.Zusy.202387
NANO-Antivirus	Trojan.Win32.Gotango.dyrrcn
Rising	Downloader.FakeIE!8.198 (CLOUD)
Emsisoft	Gen:Variant.Zusy.202387 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
VIPRE	Tango
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gc
Sophos	Generic PUA NF (PUA)
Paloalto	generic.ml
Jiangmin	Trojan.Gotango.ao
Avira	HEUR/AGEN.1205401
Antiy-AVL	Trojan/Generic.ASCommon.FA
Kingsoft	Win32.Heur.KVM099.a.(kcloud)
Microsoft	PWS:Win32/Zbot!ml
GData	Gen:Variant.Zusy.202387
Cynet	Malicious (score: 100)
McAfee	Artemis!15923D01742A
MAX	malware (ai score=83)
VBA32	Trojan.Gotango
Malwarebytes	Malware.AI.1441907235
Tencent	Malware.Win32.Gencirc.114bd04a
Yandex	Trojan.Gotango!xSqwKF9nZNU
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Gotango.VRR!tr
AVG	Win32:Malware-gen
Cybereason	malicious.1742a0
Panda	Trj/Genetic.gen