What is “Malware.AI.1621995761”?

The Malware.AI.1621995761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1621995761 virus can do?

• Sample contains Overlay data
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1621995761?

File Info:
name: CCB55FAA4A54315FB18C.mlw
path: /opt/CAPEv2/storage/binaries/3d6b9861bc36a1c7fdf864fec46945424c027b7e7f65781a1173983451a53a7e
crc32: F0414EF0
md5: ccb55faa4a54315fb18c4b9214f21b5c
sha1: 8673854d4056dc36fc4b5c0157f709988a0d6b07
sha256: 3d6b9861bc36a1c7fdf864fec46945424c027b7e7f65781a1173983451a53a7e
sha512: 3f2faa664a0f0a0a5f5cbd7465ca0497877c6ad64d11df3086de074d1c83978bbd3f104fb14c94d046833b2431dfcd043e00b7cf3790cd0d41640d38f7f652ce
ssdeep: 49152:ofvq5d946zw95yR+WUduq/YCyivVdSEoAYaaVsk/iw/I5Q1:ofvqad95qizf7+B/s5m1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18BA53341D7D1F85AC16BA932EA83F9F41B059D108EA8D613B1AEBFA530325D67E0D13C
sha3_384: bb86fa393df3f60125254c63358baca243e89851709c2dc3532d8b3c6097f475b0d9186cc3bfa0989fe54e7d0036e765
ep_bytes: 60be00a086008dbe0070b9ff5789e58d
timestamp: 2015-01-26 02:49:16

Version Info:
CompanyName: Doyo.cn
FileDescription: 逗游游戏宝库 安装程序
FileVersion: 2, 9, 12, 9
LegalCopyright: doyo.cn All Rights Reserved
ProductName: 逗游游戏宝库
ProductVersion: 2, 9, 12, 9
Translation: 0x0804 0x03a8

Malware.AI.1621995761 also known as:

How to remove Malware.AI.1621995761?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.