Malware.AI.1764405905 removal

The Malware.AI.1764405905 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1764405905 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1764405905?


File Info:
name: C1B149C481DEFDB49BA8.mlw
path: /opt/CAPEv2/storage/binaries/d5a0bfbf7d557773cf19b6e9e8d8841648d87b502fec27b8d8946a9f9499e7c1
crc32: CA4FAA24
md5: c1b149c481defdb49ba8e77f4201079f
sha1: 0afee0337d788dea49e6de139e4140e32263115b
sha256: d5a0bfbf7d557773cf19b6e9e8d8841648d87b502fec27b8d8946a9f9499e7c1
sha512: e525ae7f39c4dc2299ba4fe687b97059d26550e165056086fdde4743287cd74dae16f069d2e7fe8977c03b279fe7af1fedc32fd5fac7fb53f67898945f420831
ssdeep: 3072:AWDfD3onpke/udI2Ts0wzw4FYevnqnpiuG:AW/ozqI2azRFYePqnpiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0048F628970BB13E951093517E06BFB801D3C2F4BE5060A7CADDA5F3763D9A349F942
sha3_384: d0dc714d71d98cd1b491bc0ffc9c22cd2dcc89b70b6e699faea4507fd95dde6a917d11b7b7e7bd0b09f15274c60d24d0
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:
0: [No Data]

Malware.AI.1764405905 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.525620
ClamAV	Win.Malware.Midie-6847893-0
FireEye	Generic.mg.c1b149c481defdb4
CAT-QuickHeal	Trojan.MuldVMF.S21469993
Skyhigh	BehavesLike.Win32.Generic.ct
ALYac	Gen:Variant.Zusy.525620
Malwarebytes	Malware.AI.1764405905
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 005690671 )
K7GW	Trojan ( 005690671 )
Cybereason	malicious.37d788
Arcabit	Trojan.Zusy.D80534
VirIT	Trojan.Win32.VBUCornT.DRP
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FNGV
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.525620
NANO-Antivirus	Trojan.Win32.Banker1.fnwqkb
SUPERAntiSpyware	Trojan.Agent/Gen-Strictor
Avast	Win32:VB-AJKU [Trj]
Tencent	Trojan.Win32.VB.ko
TACHYON	Trojan/W32.VB-Agent.188482.C
Sophos	Mal/VB-AQT
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.MulDrop17.61497
VIPRE	Gen:Variant.Zusy.525620
TrendMicro	TROJ_GEN.R03BC0DLO23
Emsisoft	Gen:Variant.Zusy.525620 (B)
Ikarus	Trojan.Crypt
Jiangmin	Trojan.VB.aqyg
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Wacatac.b
Kingsoft	malware.kb.a.992
Microsoft	TrojanDropper:Win32/Muldrop.V!MTB
ZoneAlarm	UDS:Trojan.Win32.Generic
GData	Win32.Trojan.VBClone.C
Varist	W32/VB_Troj.J.gen!Eldorado
AhnLab-V3	Trojan/Win32.Agent.R252862
McAfee	GenericRXHC-SS!C1B149C481DE
MAX	malware (ai score=81)
VBA32	SScope.Trojan.VB
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0DLO23
Rising	Trojan.VBClone!1.E032 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/VBClone.D!tr
BitDefenderTheta	AI:Packer.1DDCF60A20
AVG	Win32:VB-AJKU [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.1764405905?

Malware.AI.1764405905 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X