What is “Malware.AI.2497570497”?

The Malware.AI.2497570497 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2497570497 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Anomalous file deletion behavior detected (10+)
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Attempts to modify Internet Explorer’s start page
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Installs itself for autorun at Windows startup
• Attempts to create or modify a Browser Helper Object
• Attempts to modify proxy settings
• Harvests cookies for information gathering
• Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.2497570497?

File Info:
name: FA4A15AA44BA4D3EC23F.mlw
path: /opt/CAPEv2/storage/binaries/7736702c2a17d4cbb9da65c047832b1f5cb5e23a7c428d81fb99266619856cbe
crc32: B3FE7A56
md5: fa4a15aa44ba4d3ec23f0acabb64efd5
sha1: 44f86dd3939634d6203bcf31239ce735f2de2488
sha256: 7736702c2a17d4cbb9da65c047832b1f5cb5e23a7c428d81fb99266619856cbe
sha512: 2fcf2be7076aa627d7ef459fb194f6dd27ef4a63af0f4c9d2845a2dc205b89931db2cebeb1696ea300d6cbfa6b22fceffd0891a184cedd3152030fd23b4b4879
ssdeep: 24576:xzaeiNEoa9c43KS2m8o33BwsBiN8Pc5TxoyezUu0RJ4:xeNwc43Khm85r2y5uOJ4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1376533E42D1BC36FF141EAB986A11C44EF966B94F2A0C0DE5F4CEBC71FE61009526A1D
sha3_384: 03b102b6532c4ecb148d7ee88268b12b0d46278d69fc91a5ece1d72f8782b20e0370cb429bac08d30df91a08f64d5a14
ep_bytes: 558bec81ec2c0500005356576a015e6a
timestamp: 2000-04-25 14:37:12

Version Info:
CompanyName: webdevaz
FileDescription: Dressed for Christmas
FileVersion: 
LegalCopyright: webdevaz

Malware.AI.2497570497 also known as:

How to remove Malware.AI.2497570497?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.