Malware

Malware.AI.2158272948 removal guide

Malware Removal

The Malware.AI.2158272948 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2158272948 virus can do?

  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself

How to determine Malware.AI.2158272948?


File Info:

crc32: F6CCCE91
md5: 530baa6a3f21fbdb2168acbc60d364ed
name: 530BAA6A3F21FBDB2168ACBC60D364ED.mlw
sha1: d9d03ce2f3ad2fec18a50e5f52bd44552066c6c4
sha256: 4c710c5d369526f95881e2f996907ddd23dc6f7e0a4afabfad66cd527751aca5
sha512: a8165f8a367fa64d71c1c78fb5f4116696c1c9e4ab87bcf679eeeb8e785fdfd8bacc489d10b3ff9b2a9eed0ba17286543f302d10b4a1e9bd1a815cc447e5138b
ssdeep: 6144:gsT/ZUAgmHcp9ui7zcjsLDNz2eBrPLl2pA31D8oOmFR75FT+5sKH2z3MrtB+gAD:/9UAO7zcAFz2eBEpA31D8kFR75Fk+J2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.2158272948 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0049ea3d1 )
DrWebTrojan.DownLoader24.22529
CynetMalicious (score: 99)
McAfeeArtemis!530BAA6A3F21
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.37882
SangforRansom.Win32.Blocker.jydm
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0049ea3d1 )
Cybereasonmalicious.a3f21f
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/CoinMiner.SX
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Blocker.jydm
BitDefenderGen:Trojan.Heur3.LPT.PGW@aubE7dfcb
NANO-AntivirusTrojan.Win32.Blocker.encign
MicroWorld-eScanGen:Trojan.Heur3.LPT.PGW@aubE7dfcb
TencentWin32.Trojan.Blocker.Srxb
Ad-AwareGen:Trojan.Heur3.LPT.PGW@aubE7dfcb
SophosMal/Generic-S
ComodoMalware@#a0xbafwye0ph
BitDefenderThetaAI:Packer.8D9CCB1E21
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Backdoor.jm
FireEyeGeneric.mg.530baa6a3f21fbdb
EmsisoftGen:Trojan.Heur3.LPT.PGW@aubE7dfcb (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Blocker.gpw
AviraHEUR/AGEN.1123016
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Skeeyah.A!bit
ArcabitTrojan.Heur3.LPT.EBF4C1
GDataGen:Trojan.Heur3.LPT.PGW@aubE7dfcb
AhnLab-V3Malware/Gen.Generic.C1878427
VBA32Hoax.Blocker
MAXmalware (ai score=100)
MalwarebytesMalware.AI.2158272948
PandaTrj/GdSda.A
RisingRansom.Blocker!8.12A (CLOUD)
YandexTrojan.GenAsa!xfXgWAH5MGw
IkarusWorm.Win32.Agent
FortinetW32/Blocker.JYDM!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Ransom.150

How to remove Malware.AI.2158272948?

Malware.AI.2158272948 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment