Malware

Malware.AI.1549181679 information

Malware Removal

The Malware.AI.1549181679 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1549181679 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Writes to the spooler folder, potential vulnerability or printer driver install

How to determine Malware.AI.1549181679?


File Info:

name: C88F39E8B464771594D9.mlw
path: /opt/CAPEv2/storage/binaries/490caf530fce5ac37c9a1154afafe2153e4269e09f5134cbbac0bd10d5512f79
crc32: 8D50CD00
md5: c88f39e8b464771594d9d027bc9312e0
sha1: acd4c2dd45627105cc79cf6f77bc680333d3181f
sha256: 490caf530fce5ac37c9a1154afafe2153e4269e09f5134cbbac0bd10d5512f79
sha512: ac5ef3178ac2b90179fb95e39a4845f1fe48f2342e0afc38d46c75754e8b0d297c2016edaf306e1772f70b7a907b9b562f47d73475e55a5688256beed890b002
ssdeep: 1536:tD8NU1i2/QA+SR6OS5BSnRMbEdZppGaXDT5EQO4/JbEdPo0Ad4dk16nEnKdXL4Zm:tANYTQYMt2RJvDT6QztEBsEkgEnKds0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7C3121FD7BEE451E3EE82300499CF7F191BE20124E98B276AA116B11D391378E79F64
sha3_384: b711b91dc1a0081c6e606278beb7e70fd8572580f8aec12d640b80befeaa27c4f78c67da6ec5396462b747d76839aae4
ep_bytes: 558bec83ec5056be0000000083c600bf
timestamp: 2005-03-09 12:42:03

Version Info:

CompanyName:
FileDescription: Resource viewer, decompiler & recompiler.
FileVersion: 3.4.0.79
InternalName: ResHack
LegalCopyright: (c) Angus Johnson 1999-2002
LegalTrademarks:
OriginalFilename: ResHack
ProductName:
ProductVersion: 3.0.0.0
Comments: Freeware, but see help file for conditions.
Aditional Notes: Not for distribution without the authors permission
Translation: 0x0c09 0x04e4

Malware.AI.1549181679 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.TDSS.lic1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ulise.378435
FireEyeGeneric.mg.c88f39e8b4647715
CAT-QuickHealTrojan.Alureon.27425
Cylanceunsafe
ZillyaTrojan.TDSS.Win32.10177
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Olmarik.541f76eb
K7GWTrojan ( 0056f4a01 )
K7AntiVirusTrojan ( 004c8b961 )
BitDefenderThetaGen:NN.ZexaF.36350.hm0@aqzSCrgi
VirITTrojan.Win32.Generic.AGDU
CyrenW32/Alureon.AU.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Olmarik.ADF
TrendMicro-HouseCallBKDR_TDSS.SMD3
ClamAVWin.Trojan.TDSS-3986
KasperskyTrojan.Win32.TDSS.blgl
BitDefenderGen:Variant.Ulise.378435
NANO-AntivirusTrojan.Win32.TDSS.bpyyo
SUPERAntiSpywareTrojan.Agent/Gen-FakeToolp[Res]
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.10b26864
SophosMal/TDSSPack-AH
F-SecureTrojan.TR/Agent.bzj.1
DrWebBackDoor.Tdss.4246
VIPREGen:Variant.Ulise.378435
TrendMicroBKDR_TDSS.SMD3
McAfee-GW-EditionDNSChanger.ce
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Ulise.378435 (B)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Ulise.378435
JiangminTrojan/Tdss.uhw
GoogleDetected
AviraTR/Agent.bzj.1
Antiy-AVLTrojan/Win32.TDSS
XcitiumTrojWare.Win32.Olmarik.Ack@24807m
ArcabitTrojan.Ulise.D5C643
ViRobotTrojan.Win32.A.Tdss.121344
ZoneAlarmTrojan.Win32.TDSS.blgl
MicrosoftTrojan:Win32/Alureon.EC
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Tdss.R2009
Acronissuspicious
VBA32BScope.Trojan.TDSS.MTA.03
MAXmalware (ai score=100)
MalwarebytesMalware.AI.1549181679
PandaBck/TDSS.GQ
APEXMalicious
RisingTrojan.Olmarik!8.23C (TFE:2:Ored5ChiekK)
TACHYONTrojan/W32.TDSS.121344.N
FortinetW32/TDSS.BCT!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.8b4647
DeepInstinctMALICIOUS

How to remove Malware.AI.1549181679?

Malware.AI.1549181679 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment