How to remove “Malware.AI.2196294738”?

The Malware.AI.2196294738 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2196294738 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2196294738?


File Info:
name: 1497ECFBB2235DB611CA.mlw
path: /opt/CAPEv2/storage/binaries/78cd7be015076f132f34b474289fd996ebe6ee445baf1b60b780b7e6ff47d443
crc32: 12182F88
md5: 1497ecfbb2235db611cac8336ef10e44
sha1: dfbb3ab0e1b706a1b1ee0d9b0e91ee67098d5599
sha256: 78cd7be015076f132f34b474289fd996ebe6ee445baf1b60b780b7e6ff47d443
sha512: 6c7aca5366b25674157eb2da7e899d27d8c89302badc834c8ae315f7b6be69ffc55228869d737841a04f6fa8aeabccd5c1509424c7326eb3de1d180e79628aab
ssdeep: 24576:LV7uNRjr4VF3tm7s7v8Ogw/r+2ROf1IegqutJQ5FeQzcuC4r6HQ:LV7uNRXMSS0OZa2RAR5FeA6w
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T141859D11B2E4C079E0B35AB09979D7B6E935BE611E30D68B5380FE5D2F32A81C426737
sha3_384: 6897f437175912020401ed7e897ac9811daaa02d635092487d594d441c4b84099c041748b4b3aec3c15b20e7c6b7a08f
ep_bytes: 42003906740e33c9c705000000000100
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Malware.AI.2196294738 also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.1497ecfbb2235db6
McAfee	Artemis!1497ECFBB223
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Cyren	W32/Sabsik.W.gen!Eldorado
APEX	Malicious
ClamAV	Win.Trojan.Blackie-9838328-0
Avast	Win32:Malware-gen
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Ikarus	Win32.SuspectCrc
GData	Win32.Trojan.PSE.136NMWS
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Malware-gen.R463524
BitDefenderTheta	Gen:NN.ZexaF.34114.XnZ@aSwM69k
Malwarebytes	Malware.AI.2196294738
Rising	Spyware.Zbot!1.648A (RDMK:cmRtazqyWxU+wvSalhVC2MA7odsT)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Sabsik.B!tr
AVG	Win32:Malware-gen
Cybereason	malicious.0e1b70

How to remove Malware.AI.2196294738?

Malware.AI.2196294738 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X