Malware.AI.1942933155 information

The Malware.AI.1942933155 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1942933155 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Malware.AI.1942933155?


File Info:
name: 8B4A8BC38490656C0B83.mlw
path: /opt/CAPEv2/storage/binaries/ecc3423e95bb3fea453f3661f5486961b18ccf3e5661d635cad90c90527c2e0e
crc32: 4B64CAC1
md5: 8b4a8bc38490656c0b8303fb2ba8f968
sha1: 487ffc63614d7128657f9b5de489d69c01005695
sha256: ecc3423e95bb3fea453f3661f5486961b18ccf3e5661d635cad90c90527c2e0e
sha512: 7f85331f6e0490f8f1c9ac68bf272f6f006dcd32602a1461cfc5df40283c60026611cee0463955c83c3971e8cdd95bb504bb95cfd793ff08fc94e28dfedb72c5
ssdeep: 24576:1zTK4bcQyKD5NwP7yTEjIlqIBKSCZgdQgGQGt29NfMKoLp9mRLwow0uWpEQStdHr:1WsdUS9dxfJoLi9wXVWKduyPlV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179855B12A284903BD0261B7F4C7B96E49D3F7B206E268C5B2FF44A4C0F397456C36A97
sha3_384: 3fe38456d9cab545d78bd45dfcd2211c9c41aad6ffec496d4b0e911daf03952f337fa2b45145bd15be5b52df1ec63f76
ep_bytes: 558bec83c4f0535657b8b41a5800e861
timestamp: 2017-10-19 19:27:21

Version Info:
0: [No Data]

Malware.AI.1942933155 also known as:

Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.8b4a8bc38490656c
Skyhigh	BehavesLike.Win32.Infected.th
McAfee	GenericRXDB-FL!8B4A8BC38490
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	TrojanDownloader:Win32/Zumanek.1b1185d3
BitDefenderTheta	AI:Packer.3834A49918
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Zumanek.CV
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0PCA24
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Banload.euujle
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agen.Dwnw
F-Secure	Heuristic.HEUR/AGEN.1326007
TrendMicro	TROJ_GEN.R002C0PCA24
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Win32.Banload
Avira	HEUR/AGEN.1326007
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	malware.kb.a.989
Microsoft	Trojan:Win32/Dynamer!rfn
ViRobot	Trojan.Win32.Z.Banload.1862656
ZoneAlarm	HEUR:Trojan.Win32.Generic
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.BestaFera.C2191378
VBA32	TScope.Trojan.Delf
Google	Detected
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.1942933155
Panda	Trj/GdSda.A
Rising	Malware.Undefined!8.C (TFE:5:9AwlimHr1RG)
Yandex	Trojan.GenAsa!TeRknExiXP0
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Trojandldr.DEBS!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Malware.AI.1942933155?

Malware.AI.1942933155 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X