Malware

Malware.AI.2217890973 removal instruction

Malware Removal

The Malware.AI.2217890973 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2217890973 virus can do?

  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities to enumerate running processes
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.2217890973?


File Info:

name: 026D1B1037284BA13943.mlw
path: /opt/CAPEv2/storage/binaries/eeb0f748e8b461d7160092900d69fb6082c3ed0f71ec5634d4041946e8a49008
crc32: 82EAD785
md5: 026d1b1037284ba139435dad45dd1ea6
sha1: 13318b19be9fbf7a1e3d2da63cdc9356e3ebad13
sha256: eeb0f748e8b461d7160092900d69fb6082c3ed0f71ec5634d4041946e8a49008
sha512: aa71d455bb64d173adb1e926857045e61f7b8afa431f33a3268a0adc0543a1c36f9c1d53d44c141d7459bcf077294cef9bac232b15a6b0cdd80865657f0bd063
ssdeep: 3072:x7DhdC6kzWypvaQ0FxyNTBfp4xcNEAvG47NABV4538AB6LsJJhfR7Y7ku9fFxITp:xBlkZvaF4NTBB4SCAe47Nn6L8CkoFaEc
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D604CF01F7E221F6E5F2093902A6B37E9735D6255B2C9DD7C7882D136C02AD0663B3E9
sha3_384: a9d666a401065713127fc6ba22b8cb5d9162d8d4c25119813195f82a5366da9e5aacdbaf1bb33980c36f452277d313c8
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:

0: [No Data]

Malware.AI.2217890973 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
ClamAVWin.Trojan.Generic-10011119-0
FireEyeGeneric.mg.026d1b1037284ba1
CAT-QuickHealTrojan.WacatacPMF.S14901251
SkyhighBehavesLike.Win32.Generic.cc
McAfeeRDN/Generic.dx
SangforRansom.Win32.Save.a
CrowdStrikewin/grayware_confidence_60% (W)
BitDefenderThetaGen:NN.ZexaF.36744.luW@a48di2i
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
SophosGeneric ML PUA (PUA)
GoogleDetected
Kingsoftmalware.kb.a.849
VaristW32/ABRisk.HWNH-5173
AhnLab-V3Malware/Win.Generic.C5188144
MalwarebytesMalware.AI.2217890973
TrendMicro-HouseCallTROJ_GEN.R002H06L623
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
Cybereasonmalicious.9be9fb
DeepInstinctMALICIOUS

How to remove Malware.AI.2217890973?

Malware.AI.2217890973 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment