Malware

Malware.AI.1893290974 removal tips

Malware Removal

The Malware.AI.1893290974 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1893290974 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Expresses interest in specific running processes
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Executed a process and injected code into it, probably while unpacking
  • Behavioural detection: Injection (inter-process)
  • Tries to unhook or modify Windows functions monitored by Cuckoo

How to determine Malware.AI.1893290974?


File Info:

name: 0178DF1A61E91B2DD2E3.mlw
path: /opt/CAPEv2/storage/binaries/a8ab39a6d9ae53ea9cdc29ed3aec12e9e55e3b57648dcf6fcc034e804a5e17a3
crc32: AC33135D
md5: 0178df1a61e91b2dd2e3186a888eb30e
sha1: f1bfe1b35b6e31e569ba8d88c0018f3de36a031c
sha256: a8ab39a6d9ae53ea9cdc29ed3aec12e9e55e3b57648dcf6fcc034e804a5e17a3
sha512: 0c13e9c888bb887b1cc9bcb238707ec5f63b7680d2f7ec045b42f91f523528eeb9b9985828429c960ac9554cd4d0bab68d2cfd4f905731bcda8a124215ec3580
ssdeep: 3072:iRwxRv7gKV1W4rIIAF4GGFs9vudNYLWB3HSFd0OW1yWcOiy5dcUa0+06sgE+R:iRUDfXW4ud90NYLWB3HSj0OWQWcOQl5b
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B3142ABDF5A77673C4A60BF687948BE226430D31DB808E53B1D40A0AE73644518EEDF5
sha3_384: 9ae416ffc8263a382b4eed12d150fc2ac49a3fd04001613b6eeee7a06ec66b04ef59f6ddcf941a154ca24e59a352e7f3
ep_bytes: 6a706820644200e80202000033db895d
timestamp: 2007-08-26 07:25:14

Version Info:

0: [No Data]

Malware.AI.1893290974 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Cripack.Gen.1
CAT-QuickHealTrojan.Tinba.19898
McAfeeObfuscated-FAAH!0178DF1A61E9
CylanceUnsafe
ZillyaDropper.Injector.Win32.66699
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.a61e91
BitDefenderThetaGen:NN.ZexaF.34294.lmW@a402HNd
CyrenW32/S-9a74e28b!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Tinba.BE
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Cripack.Gen.1
NANO-AntivirusTrojan.Win32.Inject.dqvidu
AvastWin32:GenMalicious-KOC [Trj]
TencentTrojan.Win32.BitCoinMiner.la
Ad-AwareTrojan.Cripack.Gen.1
SophosML/PE-A + Mal/Tinba-I
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
SentinelOneStatic AI – Malicious PE
FireEyeGeneric.mg.0178df1a61e91b2d
EmsisoftTrojan.Cripack.Gen.1 (B)
IkarusTrojan.Win32.Tinba
JiangminTrojanDropper.Injector.avvb
AviraHEUR/AGEN.1117952
Antiy-AVLTrojan/Generic.ASMalwS.104687D
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Cripack.Gen.1
GDataTrojan.Cripack.Gen.1
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan-Dropper.Inject
MalwarebytesMalware.AI.1893290974
APEXMalicious
RisingTrojan.Generic@ML.98 (RDML:NA4cn44yl3LNkORRybuwXA)
YandexTrojan.GenAsa!Ad94zd+qofs
MAXmalware (ai score=85)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.DHKK!tr
WebrootTrojan.Dropper.Gen
AVGWin32:GenMalicious-KOC [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.1893290974?

Malware.AI.1893290974 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment