Malware

Malware.AI.2161918153 removal

Malware Removal

The Malware.AI.2161918153 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2161918153 virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Starts servers listening on 127.0.0.1:31749
  • Unconventionial language used in binary resources: Turkish
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Steals private information from local Internet browsers
  • Collects information about installed applications
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Malware.AI.2161918153?


File Info:

crc32: E18CC262
md5: 11501186cecfbfb798924e0df8db6757
name: 11501186CECFBFB798924E0DF8DB6757.mlw
sha1: a088f7eba75c608ea13f037532d58f5d618e8a50
sha256: a640ead6a481fc20799e4193d9475db591451b60d92bf143ad59d07203cbf9b8
sha512: 5f72815d211aecc763dc2301167a33101d53ca595088fdcdb45fcd42bfcab91aa3a3da1c73b04dce1533da10d1c8c4a58776530660636f62822c994a01ffb9e1
ssdeep: 98304:JuIv3N8Ildk4+nyAWPrMOiD/nYO63Wgbxm1ukFUseyuL9A5VyM8xRMAHn6/ZF3y:DqIrk4JgjDdWTkFU7yu2c3MAHn6/ZF3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: calimatimodunador.exe
FileVersions: 7.0.2.54
LegalCopyrights: Vsekdar
ProductVersions: 7.0.21.45
Translation: 0x0129 0x04eb

Malware.AI.2161918153 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 90)
SophosML/PE-A
F-SecureAdware.ADWARE/Lollipop.Gen4
BitDefenderThetaGen:NN.ZexaF.34608.@x0@amgRqlaG
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.11501186cecfbfb7
SentinelOneStatic AI – Malicious PE
AviraADWARE/Lollipop.Gen4
MicrosoftProgram:Win32/Wacapew.C!ml
Acronissuspicious
MalwarebytesMalware.AI.2161918153
RisingMalware.Heuristic!ET#80% (RDMK:cmRtazoet+/inCShfTY7SYukhKOe)
Qihoo-360HEUR/QVM10.1.E4D7.Malware.Gen

How to remove Malware.AI.2161918153?

Malware.AI.2161918153 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment