Malware

Malware.AI.1711433218 removal tips

Malware Removal

The Malware.AI.1711433218 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1711433218 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1711433218?


File Info:

name: 4BB4F2D4E2521985D27A.mlw
path: /opt/CAPEv2/storage/binaries/50df75c7a659027a1cc3e52dfc92b2a110d0d52e938e77676a56d28661f782a9
crc32: 1BF2842B
md5: 4bb4f2d4e2521985d27aef28892f6462
sha1: b6c3d254e7c155adf1882858f6aef8ccbb3b6aca
sha256: 50df75c7a659027a1cc3e52dfc92b2a110d0d52e938e77676a56d28661f782a9
sha512: 55e15b729cd7585bbc655fe62be387b7a4d882c4b68c2b5dec31d7d33392b4a161913a3094b1aa52e4c25a4d37e5d2bb3528227d42b852ae800a37688d8b11e3
ssdeep: 12288:gamHw/SunXbgi8wANIu77eSFoWRsu53BnXSIr:rowVnLgrwAS45RnXSIr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10AB42391ED90D9D6DF9ECA31465AFAF7213DB59030E5250F25C83D8A03B4784AB336AC
sha3_384: 72789ac0d4b9122f14fcf4cf1ea524f78c338de0781b83f9c5db7eb6a36dff99e25c7aab1f95ac908a970dac94a2ffb0
ep_bytes: 60be006055008dbe00b0eaff5783cdff
timestamp: 2010-07-12 13:09:49

Version Info:

Translation: 0x0804 0x04b0
CompanyName: Doul123
FileDescription: 宽带连接加强工具
ProductName: eHomeNet
FileVersion: 7.02
ProductVersion: 7.02
InternalName: eHomeNet
OriginalFilename: eHomeNet.exe

Malware.AI.1711433218 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (moderate confidence)
FireEyeGeneric.mg.4bb4f2d4e2521985
SkyhighBehavesLike.Win32.Trojan.hc
McAfeeArtemis!4BB4F2D4E252
ZillyaDownloader.Small.Win32.73834
SangforTrojan.Win32.Agent.Virr
Cybereasonmalicious.4e7c15
APEXMalicious
ClamAVWin.Dropper.Zusy-7192180-0
NANO-AntivirusTrojan.Win32.Small.ecfnyo
AvastWin32:Malware-gen
Trapminemalicious.high.ml.score
JiangminTrojanDownloader.Small.bxdi
Antiy-AVLTrojan[Downloader]/Win32.Small
Kingsoftmalware.kb.b.882
GDataWin32.Trojan.Agent.S4DT4T
GoogleDetected
VBA32TrojanDownloader.Small
MalwarebytesMalware.AI.1711433218
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.1711433218?

Malware.AI.1711433218 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment