Malware

Malware.AI.1961739646 removal

Malware Removal

The Malware.AI.1961739646 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1961739646 virus can do?

  • Unconventionial language used in binary resources: Hebrew
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1961739646?


File Info:

name: D1BE2AE2B18CC33C8D30.mlw
path: /opt/CAPEv2/storage/binaries/f530f319f5f0b091b35241f75214d880973a742f0f964442955e6f79b6ff897b
crc32: 19EDED9E
md5: d1be2ae2b18cc33c8d307dccaa6cf66b
sha1: d219eea94e28dbac91a45c5e2099f8bd0e91b5e5
sha256: f530f319f5f0b091b35241f75214d880973a742f0f964442955e6f79b6ff897b
sha512: 273d052fbe19bfb7e721f688c0db0ecf8461bf4c3548cfbdf91ee4d7f14187a78afcbf2ba52cf2cbb3048df25284221ca92b39fe3356aec3154775003953d0b6
ssdeep: 6144:SSb/059IkvkT5A2zzqGG0henjqPt+c/+vfDgwebjALRmiJb16axEfVd42koSJCZi:S08K+c/6DgwebjALRmipToSY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12EB45BA537D3C177D22911708994827196B27DA45F338BCB23A8EE3DAD39DC08936739
sha3_384: ed1d8db36e0963587e9a96383e78891be9d9db005e88473d472d82ba53b141db4d0f109af08dbd38f10ea604b4a5054b
ep_bytes: 60be00904d008dbe0080f2ff5789e58d
timestamp: 2017-11-19 14:16:23

Version Info:

Comments: SV12
CompanyName: Exent Technologies Ltd.
FileDescription: FreeRide Games
FileVersion: 1, 0, 1, 15
InternalName: FreeRide Games
LegalCopyright: Copyright © 1996-2017 Exent Technologies Ltd. All rights reserved.
LegalTrademarks:
OriginalFilename: FreeRide Games.EXE
PrivateBuild:
ProductName: FreeRide Games
ProductVersion: 1, 0, 1, 15
SpecialBuild:
Translation: 0x0409 0x04b0

Malware.AI.1961739646 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Fragtor.4!c
Elasticmalicious (moderate confidence)
McAfeeGenericRXAA-AA!D1BE2AE2B18C
CylanceUnsafe
SangforTrojan.Win32.Agent.Vu8c
CyrenW32/GameVance.AV.gen!Eldorado
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
AvastWin32:Malware-gen
F-SecureHeuristic.HEUR/AGEN.1251230
Trapminemalicious.moderate.ml.score
GDataWin32.Application.Exent.B
GoogleDetected
AviraHEUR/AGEN.1251230
Antiy-AVLTrojan/Generic.ASMalwS.330C
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Malware/Win.Generic.R520036
MalwarebytesMalware.AI.1961739646
TrendMicro-HouseCallTROJ_GEN.R03BH0CIF22
MaxSecureTrojan.Malware.188152763.susgen
FortinetW32/ULPM.16C0!tr
AVGWin32:Malware-gen
CrowdStrikewin/grayware_confidence_60% (W)

How to remove Malware.AI.1961739646?

Malware.AI.1961739646 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment