Malware.AI.19016140 removal

The Malware.AI.19016140 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.19016140 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid

How to determine Malware.AI.19016140?

File Info:
name: 9EE146FDC998585FBFF0.mlw
path: /opt/CAPEv2/storage/binaries/113235bfb6de579950fa748f71837c45b36379e581273a9b2201735e74173a4e
crc32: A362E965
md5: 9ee146fdc998585fbff0e1a5a209c821
sha1: 911d6e108abfe140469a1bd72b739b46bf1ae4f1
sha256: 113235bfb6de579950fa748f71837c45b36379e581273a9b2201735e74173a4e
sha512: 572ae1fc09dfb9f7aefcd0fc5b994072dc02acb19bb52bd43478a6105a547e4652b77131aa2480ee6c965626bde617e88557b04aa74791579e1bd3528951f602
ssdeep: 12288:bABWV9vdPT2hGTi9DNPqNnxuurjbvJIWtEFP4p0bX/TgbSthiUrIzLh:bj7v17TiVNPqNnxuurjbvJIWtEFP4p0U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192D429B07D82816AE8CD06F50F56C97CB3BC6F388EE7479332A07B1E4A35ADA151511B
sha3_384: 3a41273ec9ba5091b99accdd42a0ac481e3c592804be4113129eb298503dba10782316e5a9431e573b66f52abc7ee7a8
ep_bytes: e8826d0000e916feffff6a00ff742414
timestamp: 2006-07-31 14:37:24

Version Info:
CompanyName: Satisfyd Speech 
FileDescription: Stopcaptain
FileVersion: 0, 5, 1607, 4858
InternalName: Stopcaptain
LegalCopyright: Copyright © 2019 Satisfyd Speech 
LegalTrademarks: Stopcaptain
OriginalFilename: lessfly.exe
ProductName: Stopcaptain
Translation: 0x0409 0x04b0

Malware.AI.19016140 also known as:

How to remove Malware.AI.19016140?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.