Malware

Malware.AI.1643702893 removal instruction

Malware Removal

The Malware.AI.1643702893 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1643702893 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)

How to determine Malware.AI.1643702893?


File Info:

name: 9FCBDAB49024461A31B4.mlw
path: /opt/CAPEv2/storage/binaries/670aee143819252eb64cacca5d64c5848d9f0a09acf9b6e89187efef34ecbfdf
crc32: FC60438E
md5: 9fcbdab49024461a31b431b63baa3639
sha1: 7cee264981a14ee35e3ce917b45abdc27dea49ea
sha256: 670aee143819252eb64cacca5d64c5848d9f0a09acf9b6e89187efef34ecbfdf
sha512: c9578f8b9a535c4d3614f35384e7e16e24cef88ffe14f67ba4ab261d68fcebac163d60674f02da061cbe92d7635e9aa6c1e516c55e8d3cf9da9c37d6239ff151
ssdeep: 12288:8/pIwft6rEWJPwmIqCJMtmzUo1SFjxKVl:dQ6rECPw/3V1SFjxKVl
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1EAE43AB3EB805EEBC61502F445AA7321E336F9B03F12BB17EB1496311D43AF19E86615
sha3_384: 7754302f42f04d45b5271a9984c4230743103692b673912c6224295d6a18e3cbf864b5f0bcf339b1f9fe56cf404bc286
ep_bytes: 4883ec28488b05551f0400c700010000
timestamp: 2021-12-08 16:42:03

Version Info:

0: [No Data]

Malware.AI.1643702893 also known as:

LionicTrojan.Win32.Bulz.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.332842
FireEyeGen:Variant.Bulz.332842
ALYacGen:Variant.Bulz.332842
CylanceUnsafe
K7AntiVirusTrojan ( 00580f131 )
AlibabaTrojan:Win32/Shelma.b97399d8
K7GWTrojan ( 00580f131 )
Cybereasonmalicious.490244
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Injector.FZ
TrendMicro-HouseCallBackdoor.Win64.SWRORT.YXBLJZ
Paloaltogeneric.ml
KasperskyTrojan.Win32.Shelma.brwk
BitDefenderGen:Variant.Bulz.332842
AvastFileRepMalware
TencentWin32.Trojan.Bulz.Hytv
Ad-AwareGen:Variant.Bulz.332842
SophosMal/Generic-S
TrendMicroBackdoor.Win64.SWRORT.YXBLJZ
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Variant.Bulz.332842 (B)
GDataGen:Variant.Bulz.332842
AviraTR/Injector.uxlla
MAXmalware (ai score=89)
GridinsoftRansom.Win64.Sabsik.sa
ArcabitTrojan.Bulz.D5142A
MicrosoftProgram:Win32/Uwamson.A!ml
CynetMalicious (score: 100)
McAfeeArtemis!9FCBDAB49024
MalwarebytesMalware.AI.1643702893
APEXMalicious
IkarusTrojan.Win64.Injector
FortinetW64/Kryptik.CFT!tr
AVGFileRepMalware
PandaTrj/CI.A

How to remove Malware.AI.1643702893?

Malware.AI.1643702893 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment