Malware

Should I remove “Malware.AI.190201038”?

Malware Removal

The Malware.AI.190201038 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.190201038 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • Starts servers listening on 127.0.0.1:0
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Malware.AI.190201038?


File Info:

name: 45828B70BEAA48CC1D17.mlw
path: /opt/CAPEv2/storage/binaries/d558c1283d166f947ce11c7ea25ad53accccc13a1e78ce272b2369254fbf505a
crc32: 320EAF1F
md5: 45828b70beaa48cc1d17bf82a9e6f803
sha1: 26b19b418d3afd531b68d7f2bc3c0ef8df0347c6
sha256: d558c1283d166f947ce11c7ea25ad53accccc13a1e78ce272b2369254fbf505a
sha512: 23ba61fbeae36f68094e4953193066cdb09df54f632c0e07ecd0568f851bc332c62c188101f11e532281e87ccb60a36f53137b20c6fdec24bc025cf56e53febf
ssdeep: 49152:3F40p+uzbTeAlxftggggM6Sgjn46YZdNxFrcr95ajjKP/hUUu8ysEqsBnQZVwGC:3pNThxf1SQ4t1rc52ghUfsxspZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115F59F15FAC27172E9A3007685BA67BE4A3AFF34132880D393D03D699A315E1793E357
sha3_384: a2c66d44a60e99545df72b4c8337c314efc7d188f8bfe33e7ce2a63c09627ff7e5fdb10cbf38ab4bd40fdd2cda05ab1c
ep_bytes: e81d100000e97afeffff558bec5de9d7
timestamp: 2021-12-15 01:06:41

Version Info:

CompanyName: 风尚云起文化传媒(北京)有限公司
FileDescription: Update.exe
FileVersion: 1.9.5.211213
InternalName: Update.exe
LegalCopyright: Copyright(C)2021 风尚云起文化传媒(北京)有限公司
OriginalFilename: Update.exe
ProductName: Update.exe
ProductVersion: 1.9.5.211213
Translation: 0x0804 0x04b0

Malware.AI.190201038 also known as:

LionicAdware.Win32.MiniPages.2!c
Elasticmalicious (high confidence)
DrWebAdware.Softcnapp.170
MicroWorld-eScanGen:Variant.Strictor.265901
FireEyeGeneric.mg.45828b70beaa48cc
ALYacGen:Variant.Strictor.265901
CylanceUnsafe
K7AntiVirusAdware ( 00570d6e1 )
AlibabaAdWare:Win32/AntZip.3e6f7b08
K7GWAdware ( 00570d6e1 )
CrowdStrikewin/grayware_confidence_90% (D)
CyrenW32/ABRisk.WWYE-3417
ESET-NOD32a variant of Win32/AntZip.A potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002H0CB922
Kasperskynot-a-virus:HEUR:AdWare.Win32.MiniPages.gen
BitDefenderGen:Variant.Strictor.265901
NANO-AntivirusRiskware.Win32.MiniPages.jmvfgr
AvastWin32:Adware-gen [Adw]
TencentPua:Adware.Win32.Minipages.16000143
Ad-AwareGen:Variant.Strictor.265901
SophosSoftcnapp (PUA)
ZillyaAdware.MiniPages.Win32.379
McAfee-GW-EditionArtemis!PUP
EmsisoftGen:Variant.Strictor.265901 (B)
GDataGen:Variant.Strictor.265901
JiangminAdWare.MiniPages.iy
MAXmalware (ai score=81)
ArcabitTrojan.Strictor.D40EAD
MicrosoftTrojan:Win32/Wacatac.A!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.R459978
McAfeeArtemis!45828B70BEAA
VBA32BScope.Adware.Softcnapp
MalwarebytesMalware.AI.190201038
RisingAdware.Agent!1.D33B (CLASSIC)
IkarusPUA.AntZip
MaxSecureVirus.W32.AdWare.Burden.gen_226880
FortinetRiskware/AntZip
AVGWin32:Adware-gen [Adw]
PandaTrj/Genetic.gen

How to remove Malware.AI.190201038?

Malware.AI.190201038 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment