Malware

What is “Malware.AI.2331040888”?

Malware Removal

The Malware.AI.2331040888 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2331040888 virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Korean
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.2331040888?


File Info:

crc32: F2348336
md5: 1b53dc7fbb6d2fc9122e83a74e801c16
name: 1B53DC7FBB6D2FC9122E83A74E801C16.mlw
sha1: b4d5e35ebbd679149e3daed7a7bbc6a2fa93f582
sha256: 6933ae5c139aec0a230c38aae5c0198c1c1441ee51220ffb0562ed3299ca6daf
sha512: 68cd494a3b032f1c2dfacc7a436a8790c2f5de776fae9be2389409e60c23312d6ec3d54cc2e11c540c50b20d1a827c3513756aff5e35f5ce5cec2b8c52b00aba
ssdeep: 49152:LhkFcJU0Tsr/wD80ebbnmsTmmoxzXT++9TH:LSOJ6+eozH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 1999 - present ESTsoft Corp. All right reserved.
InternalName: EGGSFX
FileVersion: 12, 6, 11, 0
CompanyName: ESTsoft Corp.
ProductName: ALZip
ProductVersion: 12, 6, 11, 0
FileDescription: ALZip Self Extractor
OriginalFilename: EGGSFX.sfx
Translation: 0x0412 0x04b0

Malware.AI.2331040888 also known as:

K7AntiVirusRiskware ( 0040eff71 )
CynetMalicious (score: 99)
CAT-QuickHealTrojan.Ursu
ALYacGen:Variant.Ursu.363721
CylanceUnsafe
AlibabaRansom:Win32/Blocker.5bab8b7f
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.fbb6d2
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Blocker.ijqq
BitDefenderGen:Variant.Ursu.363721
MicroWorld-eScanGen:Variant.Ursu.363721
TencentMalware.Win32.Gencirc.114b6bbf
Ad-AwareGen:Variant.Ursu.363721
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34686.Kv3@aiV7PTfO
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.1b53dc7fbb6d2fc9
EmsisoftGen:Variant.Ursu.363721 (B)
JiangminTrojan.Blocker.peu
WebrootAdware.Hotbar
AviraTR/Blocker.udet
eGambitGeneric.Malware
MicrosoftTrojan:Win32/Occamy.C69
AegisLabTrojan.Win32.Generic.4!c
GDataGen:Variant.Ursu.363721
TACHYONRansom/W32.Blocker.1649296
McAfeeArtemis!1B53DC7FBB6D
MAXmalware (ai score=99)
VBA32Hoax.Blocker
MalwarebytesMalware.AI.2331040888
RisingRansom.Blocker!8.12A (CLOUD)
YandexTrojan.GenAsa!NZXZniH6D2U
IkarusTrojan-Downloader.Win32.Adload
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.2331040888?

Malware.AI.2331040888 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment