How to remove “Malware.AI.1773299840”?

The Malware.AI.1773299840 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1773299840 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
Touches a file containing cookies, possibly for information gathering

How to determine Malware.AI.1773299840?


File Info:
name: 1A9AE31D26D80BBC84F0.mlw
path: /opt/CAPEv2/storage/binaries/327168284aa711531f9c6a02131437515bfe2e79fa6e2fbdf1e62c036c059fd5
crc32: BEE50CE9
md5: 1a9ae31d26d80bbc84f09f9d573c7988
sha1: 5e0ce579e9d2c6e941dc43198879e5efe6c58c0b
sha256: 327168284aa711531f9c6a02131437515bfe2e79fa6e2fbdf1e62c036c059fd5
sha512: 8973a52003c9573629739e984d027d5eaa7473419f50c98a67947f6583df87999754bf8d97b2d6ee26be8344bb0febb86a621535b3debe321b35a2b80934c008
ssdeep: 12288:wAXxxHmsTPNbQskxxHmsTPd4KyyKGJCIBvd:PPNbNEJNbdgyhrd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10805AB23E64391D2EC29507E2A04AFBD16A34C268EF7911B79C0325E16B157FC63E39D
sha3_384: 52b1c3a1ea47a8d8c88bf5db12a1be7ac85a60203e966746d8793d8644e5c801144bd0489361a55f6beb9d54e8b54443
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-08-12 08:01:46

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: Sakura.exe
LegalCopyright:  
OriginalFilename: Sakura.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Malware.AI.1773299840 also known as:

Bkav	W32.Common.D27FE83B
Lionic	Trojan.Win32.Generic.4!c
ClamAV	Win.Malware.Gorgon-9775564-0
McAfee	Artemis!1A9AE31D26D8
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V3lo
CrowdStrike	win/malicious_confidence_70% (D)
Elastic	malicious (high confidence)
APEX	Malicious
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.1a9ae31d26d80bbc
Antiy-AVL	Trojan/Win32.Zpevdo
Kingsoft	malware.kb.c.945
Microsoft	Trojan:Win32/AgentTesla!ml
Google	Detected
BitDefenderTheta	Gen:NN.ZemsilF.36722.Zm0@aWletZm
Malwarebytes	Malware.AI.1773299840
Panda	Trj/GdSda.A
Rising	Trojan.Zpevdo!8.F912 (CLOUD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Cybereason	malicious.9e9d2c
DeepInstinct	MALICIOUS

How to remove Malware.AI.1773299840?

Malware.AI.1773299840 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X