Categories: Malware

What is “Malware.AI.1966392380”?

The Malware.AI.1966392380 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1966392380 virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.1966392380?


File Info:

crc32: 07782A45md5: a158121de4d9786bc423fbd44760bf5bname: A158121DE4D9786BC423FBD44760BF5B.mlwsha1: b6a1dc5bce796cdcc324ea215c56c72b88bd1ce9sha256: 2101ad6add35e59d9571deca1987f617f2e6be9190b75214c662f0f53ee40e80sha512: 99504a8d2575df9cf47992d8ae837ca2663be7dabec3bffd490cf41b75f80e395b27a37bd42be724b632d34326bbbff87e8ca157ab66ec0ecaddafb697effaebssdeep: 6144:OfTu1+OL6Bn6liBBonXBgWMRjZXU9CwiuWLICb44Efm3rL:yuXL6QkSXiWMRFMCrxLZb0m3rLtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Copyright DbDistinctExpression 2020Assembly Version: 116.745.343.953InternalName: ConnectionInterfaceCollection.exeFileVersion: 152.622.906.609CompanyName: DbDistinctExpressionLegalTrademarks: DbDistinctExpression - All rights reserved. 2020Comments: CodeSubDirectory EdmErrorProductName: NodeLabelEditEventHandler RuntimeFieldHandleProductVersion: 152.622.906.609FileDescription: PowerModeChangedEventHandlerOriginalFilename: ConnectionInterfaceCollection.exe

Malware.AI.1966392380 also known as:

Cynet Malicious (score: 99)
ALYac Gen:Variant.Bulz.513372
Sangfor Infostealer.MSIL.Reline.gen
Alibaba TrojanPSW:MSIL/Kryptik.57c4c4ea
K7GW Trojan ( 0057de441 )
Cyren W32/Trojan.QTQT-7272
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABKQ
Avast Win32:DangerousSig [Trj]
Kaspersky HEUR:Trojan-PSW.MSIL.Reline.gen
BitDefender Gen:Variant.Bulz.513372
MicroWorld-eScan Gen:Variant.Bulz.513372
Ad-Aware Gen:Variant.Bulz.513372
BitDefenderTheta Gen:NN.ZemsilF.34738.Fm2@aG2107o
TrendMicro TROJ_GEN.R002C0WFG21
McAfee-GW-Edition Artemis!Trojan
FireEye Gen:Variant.Bulz.513372
Emsisoft Gen:Variant.Bulz.513372 (B)
Webroot W32.Trojan.MSIL.Reline
Avira TR/Kryptik.pdlzl
eGambit Unsafe.AI_Score_100%
Antiy-AVL Trojan/Generic.ASMalwS.3379F9C
Microsoft Trojan:Script/Phonzy.B!ml
Arcabit Trojan.Bulz.D7D55C
AegisLab Trojan.MSIL.Reline.i!c
GData Gen:Variant.Bulz.513372
AhnLab-V3 Trojan/Win.MSILKrypt.C4526518
McAfee Artemis!A158121DE4D9
MAX malware (ai score=82)
VBA32 TScope.Trojan.MSIL
Malwarebytes Malware.AI.1966392380
Panda Trj/GdSda.A
TrendMicro-HouseCall TROJ_GEN.R002C0WFG21
Ikarus Trojan.MSIL.Crypt
Fortinet W32/Reline.ABKQ!tr.pws
AVG Win32:DangerousSig [Trj]
Paloalto generic.ml

How to remove Malware.AI.1966392380?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Fugrafa.312973 information

The Fugrafa.312973 is considered dangerous by lots of security experts. When this infection is active,…

30 mins ago

Malware.AI.3400803296 malicious file

The Malware.AI.3400803296 is considered dangerous by lots of security experts. When this infection is active,…

35 mins ago

Malware.AI.297176713 malicious file

The Malware.AI.297176713 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Win32:VB-ADTK [Trj] removal instruction

The Win32:VB-ADTK [Trj] is considered dangerous by lots of security experts. When this infection is…

1 hour ago

What is “Generic.Dacic.94CCEEA9.A.D811194F”?

The Generic.Dacic.94CCEEA9.A.D811194F is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

How to remove “BScope.Adware.Shopper”?

The BScope.Adware.Shopper is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago