Malware

Malware.AI.1476729347 removal guide

Malware Removal

The Malware.AI.1476729347 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1476729347 virus can do?

  • A process created a hidden window
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Malware.AI.1476729347?


File Info:

crc32: 983A888A
md5: 1e7379329061d50a7e8b92cfebf6ac69
name: 1E7379329061D50A7E8B92CFEBF6AC69.mlw
sha1: f5ad99550faa872d0ab2ca428ea1ddd8c5894b42
sha256: 1e0e8753086d78a25a5dee41bd769be453bbebcb532b924734da0f5137dbb76b
sha512: 8de78382d7a80b4abf6f4c4313ae2cb7bffc492a9e9de9b811c6afcb54c92dd678489c098fbc40ce631407071d35a55423091002364f66a0aa4847920b139f2b
ssdeep: 49152:uzUEinI2/Y3AFuD0QtOuIK8Yy+ViyW2og7bbme18Z6fJYYuXrv53FpDq:0inO3AFuD0QtOuIKVy+ViyW2JbbmeNJ
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:

LegalCopyright: ? Microsoft Corporation. All rights reserved.
ProductVersion: 5.1.2600.5512 (xpsp.080413-2105)
ProductName: Microsoft? Windows? Operating System
FileVersion: 5.1.2600.5512
FileDescription: Choice Guard command line interface
Translation: 0x0804 0x03a8

Malware.AI.1476729347 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop3.12767
CynetMalicious (score: 100)
ALYacGen:Variant.Graftor.Elzob.20588
CylanceUnsafe
ZillyaTrojan.Generic.Win32.117354
SangforTrojan.Win32.Fedwj.b
AlibabaTrojanDownloader:Win32/Malex.d828f8c4
Cybereasonmalicious.29061d
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.QRX
APEXMalicious
AvastWin32:Conju [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Graftor.Elzob.20588
NANO-AntivirusTrojan.Win32.FraudPack.dxnzzf
MicroWorld-eScanGen:Variant.Graftor.Elzob.20588
TencentWin32.Trojan.Conju.Eaxn
Ad-AwareGen:Variant.Graftor.Elzob.20588
SophosML/PE-A
ComodoTrojWare.Win32.Kryptik.~NT@1r0f0f
BitDefenderThetaGen:NN.ZexaF.34266.Un0@aOOeLboj
FireEyeGeneric.mg.1e7379329061d50a
EmsisoftGen:Variant.Graftor.Elzob.20588 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/FraudPack.ahvx
AviraBDS/Conju.D
Antiy-AVLTrojan/Generic.ASMalwS.EB4D15
MicrosoftTrojan:Win32/Skeeyah.A!rfn
GDataWin32.Trojan.PSE.24E4LS
AhnLab-V3Trojan/Win32.FraudPack.R16585
Acronissuspicious
McAfeeArtemis!1E7379329061
MAXmalware (ai score=85)
VBA32Trojan.FraudPack
MalwarebytesMalware.AI.1476729347
PandaTrj/Genetic.gen
RisingTrojan.Win32.Fedwj.b (CLASSIC)
YandexTrojan.GenAsa!HfXeMRj+I+w
IkarusTrojan.Win32.Comame
FortinetW32/FraudPack.EWN!tr
AVGWin32:Conju [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1476729347?

Malware.AI.1476729347 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment