Malware.AI.2079252478 removal tips

The Malware.AI.2079252478 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2079252478 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid

How to determine Malware.AI.2079252478?

File Info:
name: 96E2A1706B5F263E3953.mlw
path: /opt/CAPEv2/storage/binaries/70a0480605a5845d23ba267280993a82e4040fdb78f50c793c056a107eaf9fce
crc32: E84C60C1
md5: 96e2a1706b5f263e39531f8227970234
sha1: ce252fb360d0596fec8645e436343a8e9e3d86a2
sha256: 70a0480605a5845d23ba267280993a82e4040fdb78f50c793c056a107eaf9fce
sha512: ac34f79028b8dd33f9aac1fd1c97c83e7e0785a260da1ae7a2766f75d78ab43e267a892a9aa294a1dbbc5f20e1da98bf4b2e1a3642190e9f425f77d2c5786754
ssdeep: 3072:WqjydOZcMrV2l6vLALkFfFWLAjywGAW0GNIPAI34VbUYgd0V3:W/scKNfFTGIiIPAC4OYgK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157D312D7FAFC2132C8B2023B00C64E47631AF5F97E49631D1681A5867C536489E69FBA
sha3_384: c2fbcfebf395e1d4ac1006757accff70abfaaf602ca81f95789131fbb35ad2956b99e6bb03301add8381c6254e8a7ab1
ep_bytes: 60be00d042008dbe0040fdff57eb0b90
timestamp: 2004-02-21 22:51:07

Version Info:
CompanyName: AVG Technologies CZ, s.r.o.
FileDescription: AVG Tray Monitor
FileVersion: 9.0.0.871
InternalName: avgtray
LegalCopyright: Copyright © 2010 AVG Technologies CZ, s.r.o.
OriginalFilename: avgtray.exe
ProductName: AVG Internet Security
ProductVersion: 9.0.0.871
PrivateBuild: Win32 Release_Unicode
SpecialBuild: Avg8VC8_2010_1109_133319(871), SVNRev 145063 (/branches/release/SmallUpdate9-12)
Translation: 0x0409 0x04e4

Malware.AI.2079252478 also known as:

How to remove Malware.AI.2079252478?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.