Malware

Malware.AI.2391917490 removal

Malware Removal

The Malware.AI.2391917490 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2391917490 virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.2391917490?


File Info:

name: FBE8841FEA2A5F71A46C.mlw
path: /opt/CAPEv2/storage/binaries/9166d546591313ef40deb40edd1352d9436fabcd7adb5ff390058e0d49bdf0ba
crc32: 28A39191
md5: fbe8841fea2a5f71a46c3de79453e9be
sha1: 61137edc8dffbdd475102fdf259e431b8b352bd9
sha256: 9166d546591313ef40deb40edd1352d9436fabcd7adb5ff390058e0d49bdf0ba
sha512: 982ccceefb72527f2fec4c62e743d29c65e58c06bf6fcdcd0182c7da0be40fbd8d7b94be36ea94cf4d8af5c2e107fb707470a0f2e45dfedc5fa298533da1ef82
ssdeep: 12288:8ZAAPpmP98FOB0Xsmmm0j8888KXiLV53oX:8ZTp69oOuXsmmm0j8888KSL34X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D1B45B02D19449F1D22151B0A6B66F39D971EE920E949F4EF7EDFCB30F33622982711A
sha3_384: 7f100482851d3f246008bd7defb70392a3aacb491976df6b13e5b1890045c22ecf13c900b44817064692fb91d09402a8
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 2013-12-18 11:06:02

Version Info:

CompanyName: Kingsoft Corporation
FileDescription: 金山重装高手主程序
FileVersion: 3,1,2,901
InternalName: kszz.exe
LegalCopyright: Copyright (C) 1998-2012 Kingsoft Corporation
OriginalFilename: kszz.exe
ProductName: 金山重装高手
ProductVersion: 3,1,2,901
Translation: 0x0000 0x04b0

Malware.AI.2391917490 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.143335
FireEyeGeneric.mg.fbe8841fea2a5f71
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
BitDefenderThetaGen:NN.ZexaF.34646.Hy0@aysjEzgb
SymantecML.Attribute.HighConfidence
BitDefenderGen:Variant.Fragtor.143335
CynetMalicious (score: 100)
APEXMalicious
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
Trapminemalicious.moderate.ml.score
SophosMal/EncPk-ADE
IkarusTrojan-PWS.Win32.QQPass
GDataWin32.Trojan.PSE.4OXHMM
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASCommon.FA
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
MalwarebytesMalware.AI.2391917490
RisingStealer.QQPass!1.9DF1 (CLASSIC)
SentinelOneStatic AI – Malicious PE

How to remove Malware.AI.2391917490?

Malware.AI.2391917490 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment