Malware

Malware.AI.2135061875 removal guide

Malware Removal

The Malware.AI.2135061875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2135061875 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file

How to determine Malware.AI.2135061875?


File Info:

crc32: 06B679BA
md5: 10509a0bbca61098632f92ef053ac40f
name: 10509A0BBCA61098632F92EF053AC40F.mlw
sha1: 7051cf38fd47728204e41ab4501467b8a6766c62
sha256: fddf3f7163d02b438e42252c9bffd97ca58a98ce3d8bfb91ac19b382d08dfffd
sha512: 3849cbd2212a2429254c871ab0cf97a4a2db28eab3d7f11fb693fa0e823ae705647f68a28ddfb8c71a238861a291f666074d574dbb47e79d0ccdf693942d3ab8
ssdeep: 6144:UjbeiUIv/m2OeKh9osPVH26EoTm9w5kyO1XhRhl5b+P1b:Uum9O5h9vWpoTl2yO1X9bO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract
FileVersion: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.2180
FileDescription: Win32 Cabinet Self-Extractor
OriginalFilename: WEXTRACT.EXE
Translation: 0x0409 0x04b0

Malware.AI.2135061875 also known as:

K7AntiVirusTrojan ( 0050c96f1 )
Elasticmalicious (high confidence)
DrWebDDoS.MP.5
CynetMalicious (score: 100)
ALYacMemScan:Trojan.Agent.CYIX
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0050c96f1 )
Cybereasonmalicious.bbca61
CyrenW32/Injector.KNNU-9072
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Injector.DOIH
ZonerTrojan.Win32.55257
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Cyix-6914663-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderMemScan:Trojan.Agent.CYIX
NANO-AntivirusTrojan.Win32.Yakes.eodtwh
MicroWorld-eScanMemScan:Trojan.Agent.CYIX
Ad-AwareMemScan:Trojan.Agent.CYIX
SophosMal/Generic-R + Troj/AutoG-GK
ComodoMalware@#rdqsmtornfu
BitDefenderThetaGen:NN.ZexaF.34678.vqW@aSzOhfgn
VIPRETrojan.Win32.Generic!BT
TrendMicroBKDR_FYNLOSKI.ABFN
McAfee-GW-EditionGenericR-JRO!42A8D107A36E
FireEyeGeneric.mg.10509a0bbca61098
EmsisoftMemScan:Trojan.Agent.CYIX (B)
SentinelOneStatic AI – Suspicious SFX
JiangminTrojan.Yakes.uzc
AviraTR/Crypt.ZPACK.xejim
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftBackdoor:Win32/Fynloski.A
ArcabitTrojan.Agent.CYIX
GDataMemScan:Trojan.Agent.CYIX
McAfeeArtemis!10509A0BBCA6
MAXmalware (ai score=81)
VBA32Trojan.Yakes
MalwarebytesMalware.AI.2135061875
TrendMicro-HouseCallBKDR_FYNLOSKI.ABFN
RisingTrojan.Injector!1.AFF6 (CLOUD)
IkarusTrojan.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.DOIH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.2135061875?

Malware.AI.2135061875 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment