What is “Malware.AI.2573367199”?

The Malware.AI.2573367199 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2573367199 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2573367199?


File Info:
name: 07AA365D7358D70BEE53.mlw
path: /opt/CAPEv2/storage/binaries/899f6ddb678996deeffc9d4e471b72d692b630d93721b864ba432070c5a80dd7
crc32: 1A2D309F
md5: 07aa365d7358d70bee5363c970637b32
sha1: 7575dfa0de3ca3be38731709720e73073ba0bc03
sha256: 899f6ddb678996deeffc9d4e471b72d692b630d93721b864ba432070c5a80dd7
sha512: 8ebf06e2ac19d9abb992ac85c720b1084f6ab5fb07d2b02b1a90b2945fdb581c00a3a466d4d5e92d22b64498e3997529547835918092ee884332f4c37fda5e30
ssdeep: 3072:8jcspSHGurrinmMtkxO5hcX+pI5uwkunCcHC+mKrmvmGHq4tZg:8jccSmuXEJSx0pWCcHCciYn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C4E3F14B1D0CC148E2CD9675D4A3CB7C9C62BD1644C932BA71E2A72FE937E84B70A25D
sha3_384: 4f4e485bbfe579d5118420c74f0d0a3194fddb39e39bcfaf1423e81a7d58b2138b0bc022339ef929309940719e4523b6
ep_bytes: 60be00d044008dbe0040fbff5783cdff
timestamp: 2011-03-13 16:38:54

Version Info:
Translation: 0x0409 0x04b0
Comments: LiDoo
CompanyName: LiDo
FileDescription: N5uHfN
LegalCopyright: cDm1
LegalTrademarks: gbvH5Hz0ZP
ProductName: ZvEzRlAH
FileVersion: 3.25.0026
ProductVersion: 3.25.0026
InternalName: wwww2
OriginalFilename: wwww2.exe

Malware.AI.2573367199 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.VBKrypt.lms6
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Trojan.Heur.VP.im3@aKmoqUii
FireEye	Generic.mg.07aa365d7358d70b
Skyhigh	BehavesLike.Win32.Generic.cc
McAfee	Generic VB.jt
Cylance	unsafe
VIPRE	Gen:Trojan.Heur.VP.im3@aKmoqUii
Alibaba	Trojan:Win32/Generic.d5f1d9be
Cybereason	malicious.0de3ca
Arcabit	Trojan.Heur.VP.E057FD
VirIT	Backdoor.Win32.Generic.AQNA
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Bifrose
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Bifrose-6933202-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Trojan.Heur.VP.im3@aKmoqUii
NANO-Antivirus	Trojan.Win32.VBKrypt.dnbta
Avast	Win32:VB-ACBV [Trj]
Tencent	Win32.Trojan.Generic.Najl
TACHYON	Trojan/W32.Agent_Packed.146702
Emsisoft	Gen:Trojan.Heur.VP.im3@aKmoqUii (B)
F-Secure	Heuristic.HEUR/AGEN.1347183
DrWeb	BackDoor.Bifrost.20897
Zillya	Trojan.VBKrypt.Win32.75368
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.SuspectCRC
Jiangmin	Trojan/VBKrypt.ecfd
Webroot	Adware:Win32/Clickpotato
Avira	HEUR/AGEN.1347183
Antiy-AVL	Trojan/Win32.VBKrypt
Kingsoft	Win32.Trojan.Generic.a
Xcitium	TrojWare.Win32.VB.GE@4pqh5b
Microsoft	Trojan:Win32/Ditertag.A
ViRobot	Trojan.Win32.A.VBKrypt.114176.J
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Trojan.Heur.VP.im3@aKmoqUii
Google	Detected
AhnLab-V3	Trojan/Win32.VBKrypt.R3941
BitDefenderTheta	AI:Packer.11C9ADED1F
ALYac	Gen:Trojan.Heur.VP.im3@aKmoqUii
MAX	malware (ai score=100)
VBA32	Trojan.MulDrop
Malwarebytes	Malware.AI.2573367199
Panda	Generic Malware
Rising	Trojan.Bifrose!8.25F (CLOUD)
Yandex	Trojan.VBKrypt!BfCU7x3JzjM
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.2358725.susgen
Fortinet	W32/VBKrypt.CPXA!tr
AVG	Win32:VB-ACBV [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.2573367199?

Malware.AI.2573367199 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X