Malware.AI.2497321210 removal

The Malware.AI.2497321210 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2497321210 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Malware.AI.2497321210?


File Info:
name: 2B16B0F552EA6973FCE0.mlw
path: /opt/CAPEv2/storage/binaries/9a0f00469d67bdb60f542fabb42e8d3a90c214b82f021ac6719c7f30e69ff0b9
crc32: 3513BF43
md5: 2b16b0f552ea6973fce06862c91ee8a9
sha1: 18b42f4409be86a1a414d6390927a017d72f14de
sha256: 9a0f00469d67bdb60f542fabb42e8d3a90c214b82f021ac6719c7f30e69ff0b9
sha512: 87b4fa5011d48600e525b7f11551e962dc06e0b315b687390fe430a4253b5b95474ea018a0bbb2d28f5b03aa688e6eb443866c3a9dc7adf1a986ffcb705af1bf
ssdeep: 192:+NYg910A+t8uBqO9OWm4u1l/8IEg0zYgXmU4PWlJBhuXjDWd:O10bVpBnkkzVzYYmU4eJ/0jDW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18A520710B7EC863BDAAE0B7A5C7312101BB6FA464833DE9F4C84610D9D737414A21BE6
sha3_384: 635e3d1189e092403b6fec344a79e7dff5c246cf3e93e26d79d90934b2debeca39e57448a17a9d4dcd947b1081b228e3
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-10-25 06:59:10

Version Info:
Translation: 0x0000 0x04b0
Comments: © Microsoft Word
CompanyName: © Microsoft Corp.
FileDescription: Microsoft Word
FileVersion: 14.51.1.18
InternalName: 
LegalCopyright: Copyright © Microsoft 2016
LegalTrademarks: 
OriginalFilename: 
ProductName: Microsoft Word
ProductVersion: 14.51.1.18
Assembly Version: 14.51.1.18

Malware.AI.2497321210 also known as:

Lionic	Trojan.MSIL.Zebrocy.m!c
MicroWorld-eScan	Gen:Variant.Ursu.331386
Skyhigh	Generic backdoor.ta.gen.h
ALYac	Backdoor.Zebrocy.gen
Malwarebytes	Malware.AI.2497321210
Zillya	Backdoor.Zebrocy.Win32.41
Sangfor	Backdoor.MSIL.Zebrocy.a
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Gen:Variant.Ursu.331386
K7GW	Trojan ( 700000121 )
Cybereason	malicious.409be8
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Sednit.H
ClamAV	Win.Trojan.Zebrocy-6781528-0
Kaspersky	Backdoor.MSIL.Zebrocy.a
Alibaba	Backdoor:MSIL/Zebrocy.22facb25
NANO-Antivirus	Trojan.Win32.Zebrocy.fllemd
Rising	Backdoor.Zebrocy!8.B86E (CLOUD)
Emsisoft	Gen:Variant.Ursu.331386 (B)
F-Secure	Backdoor.BDS/Redcap.jnxwg
VIPRE	Gen:Variant.Ursu.331386
TrendMicro	TROJ_FRS.0NA103LS20
FireEye	Gen:Variant.Ursu.331386
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Skeeyah
Jiangmin	Backdoor.MSIL.avez
Google	Detected
Avira	BDS/Redcap.jnxwg
Varist	W32/Trojan.HVBD-1914
Antiy-AVL	Trojan[Backdoor]/MSIL.Apt28
Kingsoft	malware.kb.c.1000
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#polr104vi496
Arcabit	Trojan.Ursu.D50E7A
ZoneAlarm	Backdoor.MSIL.Zebrocy.a
GData	Gen:Variant.Ursu.331386
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Bladabindi.C2835880
McAfee	Artemis!2B16B0F552EA
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103LS20
Tencent	Msil.Backdoor.Zebrocy.Pnkl
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Zebrocy.A!tr.bdr
BitDefenderTheta	Gen:NN.ZemsilF.36792.am0@aCfnGfc
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.2497321210?

Malware.AI.2497321210 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X