Malware

Malware.AI.1837576761 removal tips

Malware Removal

The Malware.AI.1837576761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1837576761 virus can do?

  • Uses Windows utilities for basic functionality
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Attempts to identify installed AV products by installation directory
  • Attempts to modify proxy settings
  • Appears to use command line obfuscation
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.1837576761?


File Info:

name: B58445DF61A25BE8C04B.mlw
path: /opt/CAPEv2/storage/binaries/ae57fe1a89988a89a69d1a71380dcc9f211f053ef6ae32cad4e28bde44d20438
crc32: 660CE0E3
md5: b58445df61a25be8c04b528bd5c0149e
sha1: e15afab07b2e64df59784c1981d56527e1ea933f
sha256: ae57fe1a89988a89a69d1a71380dcc9f211f053ef6ae32cad4e28bde44d20438
sha512: f61c666adfb93a3794a3a7ab9967902b50c9db50e99fb5179ebca2ad8fd263ba2d704a9578c487d5714e20bceddcc4df78cce46998d05311e1151138b17edcbd
ssdeep: 6144:Kmy+bnr+kp0yN90QEb1oLXzsuA9kPw9kXk:CMrMy90czzsrk2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18434E003F6E98432D8B52BB058F702D30B36BCA19A78436F37469D5A1CB3294A53577B
sha3_384: ec38143570bdd55d1e91d0d3b27e161b440f8427a5617e242862a7ba88b633566bee3655b887390809081b9c32725c5b
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.1837576761 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Crifi.1
FireEyeGen:Heur.Crifi.1
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Heur.Crifi.1
Cylanceunsafe
ZillyaTrojan.Agent.Win32.3595918
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005a38161 )
AlibabaTrojanDownloader:Win32/Deyma.b921763f
K7GWTrojan ( 005a38161 )
Cybereasonmalicious.07b2e6
VirITTrojan.Win32.MSIL.EY
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
ClamAVWin.Malware.Doina-10001799-0
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderGen:Heur.Crifi.1
NANO-AntivirusTrojan.Win32.Disabler.juxkor
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Deyma.Vimw
SophosTroj/PlugX-EC
F-SecureTrojan.TR/ATRAPS.Gen
DrWebTrojan.Siggen19.32857
VIPREGen:Heur.Crifi.1
TrendMicroTrojan.Win32.AMADEY.YXDGVZ
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftGen:Heur.Crifi.1 (B)
SentinelOneStatic AI – Malicious SFX
GDataWin32.Trojan-Downloader.Amadey.D
JiangminTrojanDownloader.Deyma.aqt
GoogleDetected
AviraTR/AD.Nekark.sgdjp
Antiy-AVLTrojan[Downloader]/Win32.Amadey
ArcabitTrojan.Crifi.1
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:MSIL/plugx!atmn
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.R592476
Acronissuspicious
McAfeeArtemis!B58445DF61A2
MAXmalware (ai score=86)
MalwarebytesMalware.AI.1837576761
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojan.Win32.AMADEY.YXDGVZ
RisingDownloader.Amadey!8.125AC (TFE:5:RZlUpeBEt9L)
YandexTrojan.Disabler!G6z7qDxyklM
IkarusTrojan.Spy.Stealer
FortinetMSIL/Disabler.DR!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.1837576761?

Malware.AI.1837576761 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment