Malware

Malware.AI.2566432945 removal guide

Malware Removal

The Malware.AI.2566432945 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2566432945 virus can do?

  • At least one process apparently crashed during execution
  • Executable code extraction
  • Enumerates user accounts on the system
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Modifies boot configuration settings
  • Exhibits behavior characteristic of Cerber ransomware
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Mimics the file times of a Windows system file
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Checks the system manufacturer, likely for anti-virtualization
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.2566432945?


File Info:

crc32: E8FD6341
md5: b5312f2b43aa542f7e4210af11501111
name: B5312F2B43AA542F7E4210AF11501111.mlw
sha1: 38a6368ef09d24d25145c06df2a27fdf8500f36c
sha256: a84b7363c73b77711cb8c1a9c6a62d3cf2ebdc512bfb04275ae6aa77f26407d4
sha512: a1b7064f41b1467eea45573aff9773fe6624564167668e33a6c7cf92339fb92059149fe06f1237aa461b7f62e823c3aac021c1dac3be9d98b3bea8da67d84da8
ssdeep: 6144:siNr3o8tf1j3VG9SJug1tBI9FktlGKTq9Yng:siJ1j3V0SJusk90lHTq9Yn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2010 Trend Media Corporation Limited
InternalName: FlashGet
FileVersion: 3, 7, 0, 1220
CompanyName: Trend Media Corporation Limited
Comments: FlashGet3
ProductName: FlashGet3
ProductVersion: 3, 7, 0, 1220
FileDescription: FlashGet3
OriginalFilename: FlashGet3.exe
Translation: 0x0804 0x04b0

Malware.AI.2566432945 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005224381 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.22970
CynetMalicious (score: 100)
CAT-QuickHealRansom.Cerber.G4
ALYacTrojan.Ransom.Cerber.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Cerber.d5e926d4
K7GWTrojan ( 005224381 )
Cybereasonmalicious.b43aa5
BaiduWin32.Trojan.Kryptik.anp
CyrenW32/Cerber.A2.gen!Eldorado
SymantecPacked.Generic.459
ESET-NOD32a variant of Win32/Kryptik.EZCF
APEXMalicious
AvastWin32:Filecoder-BG [Trj]
ClamAVWin.Ransomware.Cerber-6934364-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Ransom.Cerber.1
NANO-AntivirusTrojan.Win32.Kryptik.evifqp
SUPERAntiSpywareTrojan.Agent/Gen-Androm
MicroWorld-eScanTrojan.Ransom.Cerber.1
TencentWin32.Trojan.Generic.Pdlp
Ad-AwareTrojan.Ransom.Cerber.1
SophosML/PE-A + Mal/Cerber-AK
ComodoTrojWare.Win32.Kryptik.ERJ@6l0vie
BitDefenderThetaGen:NN.ZexaF.34608.uq0@a0Lglnpj
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.SMFE
McAfee-GW-EditionBehavesLike.Win32.Ransomware.fm
FireEyeGeneric.mg.b5312f2b43aa542f
EmsisoftTrojan.Ransom.Cerber.1 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.ZPACK.Gen2
eGambitUnsafe.AI_Score_93%
MicrosoftRansom:Win32/Cerber.A
ArcabitTrojan.Ransom.Cerber.1
AegisLabHacktool.Win32.Generic.x!c
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.Cerber.G
AhnLab-V3Win-Trojan/Cerber.Gen
McAfeeRansomware-GCQ!B5312F2B43AA
MAXmalware (ai score=100)
VBA32BScope.Trojan.Dynamer
MalwarebytesMalware.AI.2566432945
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_CERBER.SMFE
RisingRansom.Cerber!8.3058 (C64:YzY0OmSVAqod9KkM)
YandexTrojan.GenAsa!SmWV9nDt1jE
IkarusTrojan.Win32.Filecoder
FortinetW32/Dridex.IZC!tr
AVGWin32:Filecoder-BG [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Cerber.HxQBhYcA

How to remove Malware.AI.2566432945?

Malware.AI.2566432945 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment