Malware.AI.238106379 malicious file

The Malware.AI.238106379 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.238106379 virus can do?

Network activity detected but not expressed in API logs

How to determine Malware.AI.238106379?


File Info:
crc32: C2C9E6AC
md5: 633ee8e4e0efd3e27232f651a9da23e9
name: 633EE8E4E0EFD3E27232F651A9DA23E9.mlw
sha1: 14ce19610ba71adc07855be9fcda0286bacf20ac
sha256: b9a2545d73839f443ddfd8a9c9a00fad7753c2f237871261d45ab0595670adc9
sha512: 6314f8488649b5854dbb07d58ca6e1d73f4d386531e8dda4b59cb0cf1d06977c462fd5cf54112408fe36cba1ffb14d33f1d258d42b77e1bff54014c97f2a78de
ssdeep: 1536:CbeNPmlOiri3t9+8LTHr8kXcOUHSTVMDefFU1DlHr2rr:CrED+8fHruOUHKVlfFoDlHr2f
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: wuapp.exe
FileVersion: 7.6.7601.23806 (win7sp1_ldr.170510-0600)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 7.6.7601.23806
FileDescription: Windows Update Application Launcher
OriginalFilename: wuapp.exe
Translation: 0x0000 0x04b0

Malware.AI.238106379 also known as:

K7AntiVirus	Trojan ( 700000121 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.BladabindiNET.20
ClamAV	Win.Dropper.Bladabindi-7565286-0
ALYac	Gen:Variant.Ransom.Eicardemo.2
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 700000121 )
Cybereason	malicious.4e0efd
Baidu	MSIL.Backdoor.Bladabindi.a
Symantec	Trojan.Gen
ESET-NOD32	a variant of MSIL/Bladabindi.AH
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Ransom.Eicardemo.2
NANO-Antivirus	Trojan.Win32.Gen8.ewtycv
MicroWorld-eScan	Gen:Variant.Ransom.Eicardemo.2
Tencent	Win32.Trojan.Spy.Wlzi
Ad-Aware	Gen:Variant.Ransom.Eicardemo.2
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34796.fm0@a8lLb0b
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Generic.cxr
FireEye	Generic.mg.633ee8e4e0efd3e2
Emsisoft	Gen:Variant.Ransom.Eicardemo.2 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Spy.Gen8
eGambit	Unsafe.AI_Score_99%
Microsoft	Backdoor:MSIL/Bladabindi.AL
Arcabit	Trojan.Ransom.Eicardemo.2
ZoneAlarm	HEUR:Trojan.MSIL.Generic
GData	Gen:Variant.Ransom.Eicardemo.2
McAfee	Generic.cxr
MAX	malware (ai score=95)
Malwarebytes	Malware.AI.238106379
Panda	Trj/GdSda.A
Rising	Backdoor.Bot!1.6675 (CLASSIC)
Ikarus	Worm.MSIL.Bladabindi
Fortinet	MSIL/Agent.PPW!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.NjRAT.HgIASRcA

How to remove Malware.AI.238106379?

Malware.AI.238106379 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X