Malware

How to remove “Malware.AI.1547251955”?

Malware Removal

The Malware.AI.1547251955 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1547251955 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Malware.AI.1547251955?


File Info:

name: 4D48AEC2F29A2DA5E627.mlw
path: /opt/CAPEv2/storage/binaries/b6cff868e8fa2e3c68ea0d03733db07976ac962b68596d8af2b24e80cc522aa0
crc32: 4CF2F718
md5: 4d48aec2f29a2da5e62709ca96bb78e4
sha1: 5b5e651d8a6b87012f7ba7f7aea4925bea9a41c3
sha256: b6cff868e8fa2e3c68ea0d03733db07976ac962b68596d8af2b24e80cc522aa0
sha512: 42ef8c7ce1bf6fbe13a58f8b086fc7eb0c9e6966622c49879afbc1bc0fde79255f6032cbe02ce26e455feeb799c8bbc7cd95e3cb7cc159ac495f12fc0694f467
ssdeep: 12288:xMwOBadTW3woebl2/HzW8IkDat6/Gzqf0BFgRp:xMwOBadTXbo/zWDt6/2IoFgD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13BC4237A1FD8C852C74E0E71BE770A5BF2F5593022740B478FB62EBA722CA9E4546053
sha3_384: 55cc65114bae3a0c06da4edb7ce23f23a3333d31fd5e6da5e6543c611c3d838448f2ecdc4d9e3bd8eeefc5066500c82f
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:23

Version Info:

Comments: 手机内存卡修复工具
CompanyName: XiaoMing
FileDescription: 手机内存卡修复工具
FileVersion: 2012
LegalCopyright: XiaoMing
LegalTrademarks: (C) 2012 XiaoMing
ProductName: 手机内存卡修复工具
Translation: 0x0804 0x03a8

Malware.AI.1547251955 also known as:

BkavW32.Common.F39C8341
LionicTrojan.Win32.Generic.4!c
SkyhighBehavesLike.Win32.VBObfus.hc
McAfeeArtemis!4D48AEC2F29A
MalwarebytesMalware.AI.1547251955
K7AntiVirusAdware ( 0052b3da1 )
K7GWAdware ( 0052b3da1 )
APEXMalicious
NANO-AntivirusTrojan.Win32.Clicker.crifro
AvastFileRepMalware [Misc]
DrWebTrojan.Click2.50011
IkarusWin32.Malware
KingsoftWin32.Troj.Unknown.a
MAXmalware (ai score=95)
VBA32BScope.Trojan.Click
TrendMicro-HouseCallTROJ_GEN.R002H06L323
YandexTrojan.GenAsa!48URSs2S7nY
AVGFileRepMalware [Misc]
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_60% (W)

How to remove Malware.AI.1547251955?

Malware.AI.1547251955 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment