Malware

About “Malware.AI.1955484666” infection

Malware Removal

The Malware.AI.1955484666 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1955484666 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

pastebin.com
ocsp.digicert.com

How to determine Malware.AI.1955484666?


File Info:

crc32: F5612557
md5: 2b9ac7304d1d9452b4339e5da08daafc
name: 2B9AC7304D1D9452B4339E5DA08DAAFC.mlw
sha1: 484b1fc94045ce11e2f6fe21d2091a45c67c3df5
sha256: 1e5e61f9cfd956f9f6cc294cdf6223952359f07855699306689fb93bfd0c20f7
sha512: d65bc238e2fa73878e139f4f0e481eda787413bccbb333eb0038f0e580ce44af6863973d20ea2359243c6f89c040f635f5127601511fefc2f5b87e621f7911b5
ssdeep: 24576:gi4R+m09r4smbP+Vd5DONUYAra+nupPiGaDIqAt2J4xwi:ao4LSTppYAra+0K9DIqXEh
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Malware.AI.1955484666 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00574b221 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.41883
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.J1
ALYacGen:Variant.Symmi.93251
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.0ab672be
K7GWTrojan ( 00574b221 )
Cybereasonmalicious.04d1d9
CyrenW32/Zusy.EM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HHBK
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Razy-6726310-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.93251
NANO-AntivirusTrojan.Win32.PackedENT.fggkgb
MicroWorld-eScanGen:Variant.Symmi.93251
TencentTrojan.Win32.Kryptik.gify
Ad-AwareGen:Variant.Symmi.93251
SophosMal/Generic-S + Mal/Inject-GJ
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderThetaGen:NN.ZexaF.34266.7CW@a0OORZi
McAfee-GW-EditionBehavesLike.Win32.Sytro.dc
FireEyeGeneric.mg.2b9ac7304d1d9452
EmsisoftGen:Variant.Symmi.93251 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.crbag
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASBOL.C62E
MicrosoftVirTool:Win32/CeeInject.AKZ!bit
GDataGen:Variant.Symmi.93251
TACHYONTrojan/W32.Selfmod
AhnLab-V3Trojan/Win32.Agent.R234196
Acronissuspicious
McAfeePacked-FJB!2B9AC7304D1D
MAXmalware (ai score=89)
VBA32Trojan.Packed
MalwarebytesMalware.AI.1955484666
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.GenAsa!0xM7zILK7cg
IkarusTrojan.Patched
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1955484666?

Malware.AI.1955484666 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment