Malware.AI.2392648291 removal tips

The Malware.AI.2392648291 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2392648291 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.2392648291?


File Info:
name: D4071B429971A7FF0E26.mlw
path: /opt/CAPEv2/storage/binaries/6f8f811097c269f725db373b1c4881aaf10e1c210bc69e67e41f80df0716b329
crc32: 3613421C
md5: d4071b429971a7ff0e26627caaade19f
sha1: bcc91bd1a5d1f253cb7c40ac9ec8a6dc5c8c8083
sha256: 6f8f811097c269f725db373b1c4881aaf10e1c210bc69e67e41f80df0716b329
sha512: 988ff69ef4991397278cb6f7293db404744e52215b7afc9644ff0af64495addbc3f2d6c2c2590ae6d4f4bc259b8831df46eadc7a2ea42466810fdcf1df76a6f2
ssdeep: 6144:RLQifPeOcQFtrbUKwHa+iljnv49oZpBPGWuuDkxEo:RLQifPEgnUdUvsWBPpDwE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16754E0EDA58A5102EAFF3FB4CD72E20562B52D215D21864B68463BDC4D3BE3AC4D6313
sha3_384: ac015cbd97c304d33f0035a29291eb232142a6b490587d4fac48ffc90c321c36041f8a8435fef0ba8f84c816bfe028e4
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-08-09 05:10:48

Version Info:
Translation: 0x0000 0x04b0
Comments: Launcher for Shaiya Private Servers
CompanyName: Shaiya Developments
FileDescription: Shaiya Launcher
FileVersion: 1.0.0.0
InternalName: ShaiyaLauncher.exe
LegalCopyright: Copyright ©  2023
LegalTrademarks: 
OriginalFilename: ShaiyaLauncher.exe
ProductName: ShaiyaLauncher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.2392648291 also known as:

CyrenCloud	W32/MSIL_Agent.GEB.gen!Threatlookup
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.d4071b429971a7ff
McAfee	Artemis!D4071B429971
Malwarebytes	Malware.AI.2392648291
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
VirIT	Trojan.Win32.MSIL_Heur.A
Cyren	W32/MSIL_Agent.GEB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Trojan.GenericKD.68602214
MicroWorld-eScan	Trojan.GenericKD.68602214
Avast	Win32:Malware-gen
Sophos	Mal/Generic-S
VIPRE	Trojan.GenericKD.68602214
McAfee-GW-Edition	BehavesLike.Win32.Infected.dh
Emsisoft	Trojan.GenericKD.68602214 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1311059
Antiy-AVL	Trojan/Script.Phonzy
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D416C966
GData	Trojan.GenericKD.68602214
Google	Detected
ALYac	Trojan.GenericKD.68602214
MAX	malware (ai score=87)
TrendMicro-HouseCall	TROJ_GEN.R002H09HD23
Rising	Malware.Obfus/MSIL@AI.92 (RDM.MSIL2:6fPAV/a8Eo7DZoRrxN11nQ)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
BitDefenderTheta	Gen:NN.ZemsilF.36662.sm0@aiyIzrc
AVG	Win32:Malware-gen
Cybereason	malicious.1a5d1f
DeepInstinct	MALICIOUS

How to remove Malware.AI.2392648291?

Malware.AI.2392648291 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X