How to remove “Malware.AI.1621995761”?

The Malware.AI.1621995761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1621995761 virus can do?

• Sample contains Overlay data
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1621995761?

File Info:
name: D673CA4A2B9667AA96B4.mlw
path: /opt/CAPEv2/storage/binaries/63e45adeac9f5cd96747d77acc15b6765282ab6df64db5d251a23ab131fe1044
crc32: 122DA7C1
md5: d673ca4a2b9667aa96b4a6d5d74fd216
sha1: 04353998b7168c503058dfdf24fade0f033438dd
sha256: 63e45adeac9f5cd96747d77acc15b6765282ab6df64db5d251a23ab131fe1044
sha512: 8f7cb0107b3ededa71469fa4b16e729378fa45d8eab39b6a5d0c2bcef4ed810a460e83dd7ea0bd4e6d34cc936b841a8621c021e248c9feccf5846de0e2407ad4
ssdeep: 49152:DwRXOCHoCt2tB6LnaWUduq/YC14gS8krFIy7bfom:MOaoI2WLnGzHlrC9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11C95338EFDACE04DC1719631E10D7AF9998AFC72CA058307E27B7E0E7439969591C22D
sha3_384: df520dc3ac5d37500f54dc5314f2a7c9c8d3b60cf75e3401042a9a918685e63ebeb900460bf99b51665db94137fea70e
ep_bytes: 60be00a086008dbe0070b9ff5789e58d
timestamp: 2015-03-09 08:48:40

Version Info:
CompanyName: Doyo.cn
FileDescription: 逗游游戏宝库 安装程序
FileVersion: 2, 9, 12, 9
LegalCopyright: doyo.cn All Rights Reserved
ProductName: 逗游游戏宝库
ProductVersion: 2, 9, 12, 9
Translation: 0x0804 0x03a8

Malware.AI.1621995761 also known as:

How to remove Malware.AI.1621995761?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.