Malware

Malware.AI.1609945066 removal

Malware Removal

The Malware.AI.1609945066 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1609945066 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1609945066?


File Info:

name: A9E5593EBD618F300357.mlw
path: /opt/CAPEv2/storage/binaries/c7d4b1de689b577884c1d207feb26df45359e77c055cfc49729434dbfb017d48
crc32: 6DE68F12
md5: a9e5593ebd618f300357ef4f944dcbe1
sha1: 134708f8c8dd17b5290e7b2221e86342b6a620d7
sha256: c7d4b1de689b577884c1d207feb26df45359e77c055cfc49729434dbfb017d48
sha512: ba5ca0bcc4cda2659f349a29acb33b3cd38698a9a38f705872ed0a16f56e674d3097a1b16a7206fc83a75a1ddfba9526f2d42a067f83418d6b60d64e10d47a2e
ssdeep: 3072:mUzkUhhUJslbHFTVA5tLZTuFE1VpzQk7v35U8VdD192DM42JwwkOo4QQ2UH:mUzkqX9HXALT1jEwpUo30D32YOVQQp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F91412DE996D9124F283647B973205E5BE1C6C7B68A3C33CD385F544B8E38026B9CA13
sha3_384: 96e0d4a9d979762c78d048834ef9599b6f201862414561558148b5f26f899ec8aece45959700e95f7c8bef3af05ec2f5
ep_bytes: 60be002045008dbe00f0faff57eb0b90
timestamp: 2023-01-17 10:58:00

Version Info:

CompanyName: Holydol
FileDescription: Holydol Update
FileVersion: 1.2.1.0
InternalName: Update.exe
LegalCopyright: Copyright (C) 2022 Holydol.
OriginalFilename: Update.exe
ProductName: Update
ProductVersion: 1.2.1.0
Translation: 0x0409 0x04b0

Malware.AI.1609945066 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Razy.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Trojan.Heur.RP.mmLfbmWXSkbi
FireEyeGeneric.mg.a9e5593ebd618f30
CAT-QuickHealTrojan.Agent
McAfeeArtemis!A9E5593EBD61
MalwarebytesMalware.AI.1609945066
SangforTrojan.Win32.Agent.Vz1x
CrowdStrikewin/malicious_confidence_70% (W)
BitDefenderThetaAI:Packer.B3ADECD21F
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
APEXMalicious
CynetMalicious (score: 100)
BitDefenderGen:Trojan.Heur.RP.mmLfbmWXSkbi
AvastWin32:Malware-gen
EmsisoftGen:Trojan.Heur.RP.mmLfbmWXSkbi (B)
VIPREGen:Trojan.Heur.RP.mmLfbmWXSkbi
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
Trapminemalicious.high.ml.score
GDataGen:Trojan.Heur.RP.mmLfbmWXSkbi
Antiy-AVLTrojan/Win32.PossibleThreat
ArcabitTrojan.Heur.RP.mmLfbmWXSkbi
ALYacGen:Trojan.Heur.RP.mmLfbmWXSkbi
MAXmalware (ai score=87)
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002H09B223
RisingTrojan.Generic@AI.99 (RDML:7PJXVSEx00iHCO5LqYFVZw)
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
Cybereasonmalicious.ebd618
DeepInstinctMALICIOUS

How to remove Malware.AI.1609945066?

Malware.AI.1609945066 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment