Malware.AI.1959903942 removal guide

The Malware.AI.1959903942 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1959903942 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.1959903942?


File Info:
name: 27D42805E38E66669BE5.mlw
path: /opt/CAPEv2/storage/binaries/4fe6a8a021794b73869e0bc1b63401b156658c9b934932e56118008e17da1ee6
crc32: 8091D159
md5: 27d42805e38e66669be50463cce08f4c
sha1: a44308396c4f5a979e6166832be2f0379be77be0
sha256: 4fe6a8a021794b73869e0bc1b63401b156658c9b934932e56118008e17da1ee6
sha512: 928defa88758bd045430838f3cb84d3a28c425dfc342d1c3a3c0423cb78508fa0d2b88c75d6bf466077b31ff8015af025cb640db111c10cc1c5d40b84d87a9ce
ssdeep: 12288:mxjBq4UXiSsTpVSTroUEW7eXqY7RC0WJ:m7UXijTpwTroOeXqY7RC0WJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B55A3CFBBD08566E43351B014F2938462B2ED642E52871BA99D323E3D353932E456FB
sha3_384: 6699f3ea1cc9c3c90e7856ce10e74789261f0d4973b9c0446d80abfeda45ab68109e1d7c970a4411750a70b1d0a2d0a6
ep_bytes: 60be005069008dbe00c0d6ff57eb0b90
timestamp: 2011-12-16 18:57:31

Version Info:
Comments: Created with Setup Factory
CompanyName: Indigo Rose Corporation
FileDescription: Setup Application
FileVersion: 9.0.4.0
InternalName: suf_rt
LegalCopyright: Runtime Engine Copyright © 2012 Indigo Rose Corporation (www.indigorose.com)
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation
OriginalFilename: suf_rt.exe
ProductName: Setup Factory Runtime
ProductVersion: 9.0.4.0
Translation: 0x0409 0x04b0

Malware.AI.1959903942 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.68850771
FireEye	Trojan.GenericKD.68850771
McAfee	Artemis!27D42805E38E
Malwarebytes	Malware.AI.1959903942
Sangfor	Trojan.Win32.Agent.V264
Alibaba	Trojan:Win32/Generic.56bc3f53
Cyren	W32/Backdoor.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.68850771
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.68850771 (B)
F-Secure	Trojan.TR/Crypt.ULPM.Gen
VIPRE	Trojan.GenericKD.68850771
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan.Crypt
GData	Trojan.GenericKD.68850771
Avira	TR/Crypt.ULPM.Gen
Antiy-AVL	Trojan/Win32.ULPM
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D41A9453
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
ALYac	Trojan.GenericKD.68850771
MAX	malware (ai score=80)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CHQ23
Yandex	Trojan.GenAsa!YUjUsZtIeSs
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.217856210.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Malware.AI.1959903942?

Malware.AI.1959903942 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X