Malware

How to remove “Malware.AI.2554183026”?

Malware Removal

The Malware.AI.2554183026 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2554183026 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Detected script timer window indicative of sleep style evasion
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • A process created a hidden window
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Detects VirtualBox through the presence of a library
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Attempts to identify installed AV products by installation directory
  • Detects VirtualBox through the presence of a device
  • Detects VirtualBox through the presence of a file

How to determine Malware.AI.2554183026?


File Info:

crc32: 77A08635
md5: 77709a806be88631030bb1bd9c2dc196
name: 77709A806BE88631030BB1BD9C2DC196.mlw
sha1: 98b7697c97d101f79972bbb41365403ef5a7ecec
sha256: f8a673e4450d6505b0a8d42be41aea995a813e6980d2821af202f8dd11b0e5a1
sha512: 3ada32dfe115a3813d5830f75ddddd7fd552dc675df0985cf8cc7329cf8704028613ab428e250d56d7e4bf165d69f6453c29f6045feb1dcef044e54bfb7d05de
ssdeep: 12288:lxaVAh64U5lWOmR73B0w90yLTxNgCdudhW5r8YRVFSaEhcB2sR:lxaVxr5MfR73qwJHwCGh6rJrS5eIsR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: AdapterTroubleshooter
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Troubleshoot Display Adapter
OriginalFilename: AdapterTroubleshooter.exe
Translation: 0x0409 0x04b0

Malware.AI.2554183026 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ursu.6405
FireEyeGeneric.mg.77709a806be88631
ALYacGen:Variant.Ursu.6405
CylanceUnsafe
AegisLabTrojan.Win32.Inject.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderGen:Variant.Ursu.6405
K7GWTrojan ( 0050aace1 )
K7AntiVirusTrojan ( 0050aace1 )
CyrenW32/Injector.LQ.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.RC465-5900681-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.DNMU.enmsbi
RisingMalware.Undefined!8.C (CLOUD)
Ad-AwareGen:Variant.Ursu.6405
SophosML/PE-A
ComodoMalware@#vrertyqx647z
F-SecureHeuristic.HEUR/AGEN.1123706
DrWebTrojan.DownLoader23.63946
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_INJECTOR_GD100195.UVPM
McAfee-GW-EditionGeneric.ayj
EmsisoftGen:Variant.Ursu.6405 (B)
IkarusTrojan-Dropper.Delf
AviraHEUR/AGEN.1123706
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojan:Win32/Dynamer!ac
ArcabitTrojan.Ursu.D1905
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Ursu.6405
CynetMalicious (score: 85)
AhnLab-V3Unwanted/Win32.Downloader.C1863688
McAfeeGeneric.ayj
MalwarebytesMalware.AI.2554183026
PandaTrj/Genetic.gen
ZonerProbably Heur.RARAutorun
ESET-NOD32multiple detections
TrendMicro-HouseCallTROJ_INJECTOR_GD100195.UVPM
TencentWin32.Trojan.Inject.Ahye
YandexTrojan.GenAsa!it2UEWxH3zg
MAXmalware (ai score=81)
FortinetVBS/Runner.NFB!tr
BitDefenderThetaGen:NN.ZemsilF.34804.Zm0@aWSSJmk
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.2554183026?

Malware.AI.2554183026 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment