Malware

Malware.AI.2505293257 removal tips

Malware Removal

The Malware.AI.2505293257 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2505293257 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Malware.AI.2505293257?


File Info:

name: B090F501CD975B6ACB6B.mlw
path: /opt/CAPEv2/storage/binaries/f212b429b2ef649b8c51459637ce13eadfcf1fd4175e6954ce2601eba29c9353
crc32: 64C6788E
md5: b090f501cd975b6acb6b625b1e669f75
sha1: 149e4fc4febfba5c651415f4bd9009449c7af428
sha256: f212b429b2ef649b8c51459637ce13eadfcf1fd4175e6954ce2601eba29c9353
sha512: 71890054ce9b75210cb76c56fed6edf59ffada512feaf10fac32f403d17ced84fd93a9aad3010b44c9af954d6bca4cdf4b9f09eb9b0d5ac72c86ac24f5a6b840
ssdeep: 6144:V+sqv3/SHkl8XSmau0j7TNaJ4Nu9ccGqi6O6CGuC4QYI:V+RvykyHau0j3NaJ4Nu9ccGqi6OyQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CE549E3E95968F1BC7E532B3A0B2611C713450C267622717E31E91A4BFA03E59C78BE7
sha3_384: ea7049d370ac931ce6389628fb27c62476638aebc0da5239a72d37ba9c709fe0441e05cef3db7f8806d862a82657e5c5
ep_bytes: ff2530334200033001000b0000000000
timestamp: 2021-10-31 21:06:49

Version Info:

0: [No Data]

Malware.AI.2505293257 also known as:

LionicTrojan.MSIL.SpyEyes.l!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
MalwarebytesMalware.AI.2505293257
SangforTrojan.Win32.Save.a
K7GWUnwanted-Program ( 005454b01 )
K7AntiVirusUnwanted-Program ( 005454b01 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.CSX potentially unsafe
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Spy.MSIL.SpyEyes.gen
AvastFileRepMalware
SophosGeneric PUA BE (PUA)
F-SecureHeuristic.HEUR/AGEN.1204688
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.b090f501cd975b6a
IkarusTrojan.Snojan
AviraHEUR/AGEN.1204688
MicrosoftTrojan:Win32/Tnega!ml
GDataWin32.Trojan.Agent.872UB0
McAfeeRDN/Generic PWS.y
VBA32TScope.Trojan.MSIL
CylanceUnsafe
SentinelOneStatic AI – Malicious PE
FortinetRiskware/GameHack
AVGFileRepMalware
Cybereasonmalicious.4febfb

How to remove Malware.AI.2505293257?

Malware.AI.2505293257 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment