Malware

How to remove “Malware.AI.1771530382”?

Malware Removal

The Malware.AI.1771530382 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1771530382 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.1771530382?


File Info:

name: EBEA7C7515C9B719F596.mlw
path: /opt/CAPEv2/storage/binaries/3389ebc068ae1758f8903c9551ccc32b2ece71828a208acd2bc2003766465b06
crc32: EBAE99D9
md5: ebea7c7515c9b719f596ad7e724e8a40
sha1: da453fc4babbfbe6a70e61c9d1dd826233f71624
sha256: 3389ebc068ae1758f8903c9551ccc32b2ece71828a208acd2bc2003766465b06
sha512: 63982fd7783570063374df19641e7c546bade8b3102ecdeeb7cdf0cd0b81ffb536bef0f8c5386a2143658b3948c267d792d1d40c952fbdc14c2675ef2c8b32c1
ssdeep: 12288:U2ggXHJeT8zAMVhKGlZQH0NFaS+Vx/Wk9SfAAyHtr+rBM:U2gyQT8xxla6FaV2Q1AyHtr+ri
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FFD47C22F6914437D4732A3CDC1B92A99D29BE106E28784B7BFA1D4C8F3D69139391D3
sha3_384: f5207e001c5a3ddb80b9c31324c2980b917e7fe9a1d5e98d5d167f4539648c1a37b73a2dc48760750e859516b396f979
ep_bytes: 558bec83c4f0b840574800e89407f8ff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Malware.AI.1771530382 also known as:

DrWebTrojan.DownLoader5.27179
MicroWorld-eScanGen:Variant.Zusy.329744
FireEyeGeneric.mg.ebea7c7515c9b719
McAfeeGenericR-DUB!EBEA7C7515C9
CylanceUnsafe
ZillyaTrojan.Generic.Win32.860588
K7AntiVirusTrojan ( 7000000f1 )
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.515c9b
BitDefenderThetaGen:NN.ZelphiF.34606.OGW@a4AnpjoG
CyrenW32/Delf.QU.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Delf.QQX
APEXMalicious
KasperskyHEUR:Trojan-Spy.Win32.Delf.gen
BitDefenderGen:Variant.Zusy.329744
NANO-AntivirusTrojan.Win32.Delf.frywtx
AvastWin32:Delf-RWG [Trj]
TencentMalware.Win32.Gencirc.10d0700e
Ad-AwareGen:Variant.Zusy.329744
EmsisoftGen:Variant.Zusy.329744 (B)
VIPREGen:Variant.Zusy.329744
McAfee-GW-EditionGenericR-DUB!EBEA7C7515C9
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusWin32.Delf
JiangminTrojan/Agent.fxxy
GoogleDetected
AviraTR/ATRAPS.Gen
MAXmalware (ai score=88)
Antiy-AVLTrojan/Generic.ASMalwS.5E
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
ArcabitTrojan.Zusy.D50810
GDataGen:Variant.Zusy.329744
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.ADH.C154227
ALYacGen:Variant.Zusy.329744
MalwarebytesMalware.AI.1771530382
RisingTrojan.Generic@AI.98 (RDML:1s5Bux9aWGUO+jSbF8EQ3Q)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.74099825.susgen
FortinetW32/Delf.RWG!tr
AVGWin32:Delf-RWG [Trj]

How to remove Malware.AI.1771530382?

Malware.AI.1771530382 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment