Malware

Malware.AI.196766920 removal guide

Malware Removal

The Malware.AI.196766920 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.196766920 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.196766920?


File Info:

name: D2689DCFB42CF890DAF6.mlw
path: /opt/CAPEv2/storage/binaries/ddb868543ec3a3013153f482e906ad463df944d5d5cb1749b181e85c0f92bcb7
crc32: 0EC69008
md5: d2689dcfb42cf890daf663e5017c58d8
sha1: 1ab8af6a250c9328fba24de46aca2d000eaa6eee
sha256: ddb868543ec3a3013153f482e906ad463df944d5d5cb1749b181e85c0f92bcb7
sha512: 41230e9f9eba52f5eb75eb0ac218c526b537f69b9736a8a5ae40e356c394fa7c2c64ba4181e376ef3965e81147cbbedd14325395459f2b1c660c5af5902ce89f
ssdeep: 384:3OO4nHhObPB5BIap/ry4vrlOntFPJ1wUbfZ3I/i3I/qjvVDBgPn:eOHbPHBBLvgtFxCU93IK3I69DBgPn
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T116D2176076CC8037F5FE26FA49EE6672156CAAB01F1523F3719596EE08486D1A0336CF
sha3_384: decdb1ea9513c070bd040358632528ad0fe364782b7034307dc9e992490c9326fc421fbe8b6473512971cbd1e37bf37e
ep_bytes: e92d100000e9d81d0000e9531e0000e9
timestamp: 2019-05-08 13:56:20

Version Info:

0: [No Data]

Malware.AI.196766920 also known as:

BkavW32.Common.182F2D1E
LionicTrojan.Win32.Zusy.4!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.GenericRI.S24661580
SkyhighBehavesLike.Win32.Generic.nt
McAfeeGenericRXRF-OK!D2689DCFB42C
Cylanceunsafe
SangforTrojan.Win32.Agent.V43b
SymantecML.Attribute.HighConfidence
CynetMalicious (score: 100)
ClamAVWin.Malware.Zusy-9918395-0
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
AvastWin32:Malware-gen
SophosGeneric ML PUA (PUA)
VaristW32/Zusy.JE.gen!Eldorado
Antiy-AVLGrayWare/Win32.Zusy.a
GoogleDetected
AhnLab-V3Malware/Win.Generic.C4911926
MalwarebytesMalware.AI.196766920
TrendMicro-HouseCallTROJ_GEN.R002H0CK523
RisingTrojan.Generic@AI.91 (RDML:Oh254xN+MlqhJYKR14oWWQ)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.138657346.susgen
FortinetW32/Zusy.405919!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Malware.AI.196766920?

Malware.AI.196766920 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment