Malware.AI.1812686475 removal

The Malware.AI.1812686475 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1812686475 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.1812686475?


File Info:
name: 3D88FF31CAE7B7527F51.mlw
path: /opt/CAPEv2/storage/binaries/615fc648e3c2900b99ce9a27c3f7c1099f59bc2ecd9ac3edd7cec07f3916a92b
crc32: CCDE53B9
md5: 3d88ff31cae7b7527f5131e32d758e24
sha1: be8ee15fc5fd3184d176d57e5280b909c89be442
sha256: 615fc648e3c2900b99ce9a27c3f7c1099f59bc2ecd9ac3edd7cec07f3916a92b
sha512: 6a19473b24f0b526b7d83def853bd3041e852f7d6697db7a7e9e6a07262e199b1088b3955980df30650bc049249cd928999020144e1d5e354e521d5709cf6da6
ssdeep: 1536:IE0TBpFLiYURYB6Zvb+Cs4GYCLCy88RLBfDICS4A3KkFzl8Zn:R0cigZT+sGYkC6tgJK4zl8Zn
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D9F3BF0274D3CAF3F242407148A2AFBADB79FA680F116D839318DB5E2E755D09A3B547
sha3_384: 4107a68e0f8f44f9beeb95b3177bfdcb1a4fe425995b75c28c8981b56339f631d7dcec546e132ae82510d4595fd91280
ep_bytes: 558bec6aff68806c41006844e2400064
timestamp: 2007-07-05 11:52:54

Version Info:
Comments: 
CompanyName: 
FileDescription: DeWatermark v2.0
FileVersion: 2.0
InternalName: DeWatermark
LegalCopyright: Copyright ? 2015
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: DeWatermark v2.0
ProductVersion: 2.0
SpecialBuild: 
Translation: 0x0804 0x04b0

Malware.AI.1812686475 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Heuristic.File.Generic.00×1!p
MicroWorld-eScan	Gen:Variant.Zusy.424477
FireEye	Generic.mg.3d88ff31cae7b752
McAfee	Artemis!3D88FF31CAE7
Cylance	Unsafe
BitDefender	Gen:Variant.Zusy.424477
Cybereason	malicious.fc5fd3
Arcabit	Trojan.Zusy.D67A1D
BitDefenderTheta	Gen:NN.ZexaF.34646.ju0@amrKL!hb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R002H09II22
Paloalto	generic.ml
Rising	Trojan.Generic@AI.98 (RDML:j11j9ThDrkdswIhjzzeXLw)
Ad-Aware	Gen:Variant.Zusy.424477
Emsisoft	Gen:Variant.Zusy.424477 (B)
VIPRE	Gen:Variant.Zusy.424477
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
SentinelOne	Static AI – Suspicious PE
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
APEX	Malicious
Antiy-AVL	Trojan/Generic.ASMalwS.330C
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.424477
ALYac	Gen:Variant.Zusy.424477
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.1812686475
Fortinet	W32/PossibleThreat
AVG	FileRepMalware [Misc]
Avast	FileRepMalware [Misc]
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Malware.AI.1812686475?

Malware.AI.1812686475 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X