Malware.AI.2394542231 removal tips

The Malware.AI.2394542231 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2394542231 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.2394542231?


File Info:
name: D7CA17794ABFA22DF238.mlw
path: /opt/CAPEv2/storage/binaries/203498363075dec253a3ba15f40ea15f3b9c6b43d532064f59d588f488dde6d9
crc32: B2A68F3D
md5: d7ca17794abfa22df2389ca8f295a7fe
sha1: aedb62d7d2423d3702789d0080e4d65edb1724fe
sha256: 203498363075dec253a3ba15f40ea15f3b9c6b43d532064f59d588f488dde6d9
sha512: cc74cadfe4bfc72826a737e351dbb97e465c9e92266d6e6b87e3966a6926b54f15fe75487b727f6251cd28380d8e6e06fa51d988e9271a9f5a211cc45f3844e6
ssdeep: 12288:PVt+w8wyv/I66WoJMDmxHWOIRJNlTonx/RhBPhol4DYmmBmvOLyC:dt+w5y4DJamxHfClTcx/pJSqXTmLy
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T193D49E74D61060EBC52E7EF835C9F5F1B8796EA02302509369EA2F5B226879D933C137
sha3_384: 67e2d771aa0d8035eee46aa9809779d49c87871561b349454df8735d61bb345b56f85d88beac00272eaf414175e8412d
ep_bytes: 5150528d0d18000000648b0101c801c8
timestamp: 2059-01-15 20:44:07

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Windows Command Processor
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
InternalName: cmd
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: Cmd.Exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.18362.449
Translation: 0x0409 0x04b0

Malware.AI.2394542231 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Win32.Expiro.Gen.6
FireEye	Generic.mg.d7ca17794abfa22d
ALYac	Win32.Expiro.Gen.6
Cylance	Unsafe
Cybereason	malicious.94abfa
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Expiro.NDG
BitDefender	Win32.Expiro.Gen.6
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:Xpirat-C [Inf]
Ad-Aware	Win32.Expiro.Gen.6
Sophos	ML/PE-A + Mal/EncPk-MK
VIPRE	Virus.Win32.Expiro.dp (v)
Emsisoft	Win32.Expiro.Gen.6 (B)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Expiro.Gen.6
Avira	TR/Patched.Gen
MAX	malware (ai score=81)
Arcabit	Win32.Expiro.Gen.6
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.2394542231
APEX	Malicious
Rising	Malware.Heuristic!ET#75% (RDMK:cmRtazr7D2UJQIYNVvGh+g/cjvPG)
AVG	Win32:Xpirat-C [Inf]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.2394542231?

Malware.AI.2394542231 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X