Malware

Should I remove “Malware.AI.2581853073”?

Malware Removal

The Malware.AI.2581853073 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2581853073 virus can do?

  • A file was accessed within the Public folder.
  • Performs HTTP requests potentially not found in PCAP.
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Arabic (Saudi Arabia)
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Attempts to interact with an Alternate Data Stream (ADS)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2581853073?


File Info:

name: 12FB9161AF36DB000E6E.mlw
path: /opt/CAPEv2/storage/binaries/a10d873dcabb867c7313c2e12aed5839cd9fa9fd0f62fdbf472b93cbb157b584
crc32: AA9ADB49
md5: 12fb9161af36db000e6e0deb345a84f0
sha1: 40713df32ee4f719d380e1941490682be8c7ca9f
sha256: a10d873dcabb867c7313c2e12aed5839cd9fa9fd0f62fdbf472b93cbb157b584
sha512: 0d94b1e1c49c2ba5bc3e27aab53f5c5b1fd217741d320052869aed70df814c9b4bad94923e1392f9482e0d93a67be472225a0d9aa89b2bb55c55039f6cd3fa9e
ssdeep: 49152:5Ti0zHZVtol0T+tY6/JVjkAn3U2dYWG5wkoA4hFBchiVZj/7lKLaE:dzbClXtY+VjkAn3U2dYWG5+FBcIVZj//
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4C53A21369C90F6C162E2F3454AE37DF6A9EF20593D4247269CFB382931D93492973B
sha3_384: 9e1350149f8d26f8e7304e55d21e3f4597d630fea187e4abd776c447d9a18f72266104f3189456a8a5f1e113899d4862
ep_bytes: e894500000e979feffff3b0db8374400
timestamp: 2017-09-27 10:35:59

Version Info:

CompanyName: TODO:
FileDescription: TODO:
FileVersion: 1.0.0.1
InternalName: testproj.exe
LegalCopyright: TODO: (c) . All rights reserved.
OriginalFilename: testproj.exe
ProductName: TODO:
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Malware.AI.2581853073 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.tpr0
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.352211
FireEyeGen:Variant.Zusy.352211
CAT-QuickHealTrojan.MauvaiseRI.S5248341
McAfeeArtemis!12FB9161AF36
MalwarebytesMalware.AI.2581853073
VIPREGen:Variant.Zusy.352211
SangforDropper.Win32.Kasperagent.V2wc
K7AntiVirusTrojan ( 00549a9f1 )
AlibabaTrojanDropper:Win32/Kasperagent.f6387878
K7GWTrojan ( 00549a9f1 )
VirITTrojan.Win32.Genus.DC
SymantecTrojan.Kasperbogi
ESET-NOD32a variant of Win32/Kasperagent.E.gen
APEXMalicious
ClamAVWin.Malware.Johnnie-9958146-0
KasperskyTrojan-Dropper.Win32.Agent.bjtgqj
BitDefenderGen:Variant.Zusy.352211
NANO-AntivirusTrojan.Win32.Generic.etwjeq
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.114c08f3
EmsisoftGen:Variant.Zusy.352211 (B)
F-SecureTrojan.TR/Agent.llbta
DrWebTrojan.DownLoader25.25054
ZillyaDropper.Agent.Win32.278288
TrendMicroTROJ_FRS.0NA103IG20
McAfee-GW-EditionGenericR-NUB!F3D013079813
SophosMal/Generic-R
GDataGen:Variant.Zusy.352211
JiangminTrojan.MSIL.gbtd
WebrootW32.Gen.BT
GoogleDetected
AviraTR/Agent.llbta
MAXmalware (ai score=100)
Antiy-AVLTrojan[Dropper]/Win32.Agent
ArcabitTrojan.Zusy.D55FD3
ZoneAlarmTrojan-Dropper.Win32.Agent.bjtgqj
MicrosoftTrojan:Win32/Emotet!ml
AhnLab-V3Trojan/Win32.RL_DOTHETUK.R331398
BitDefenderThetaGen:NN.ZexaF.36662.dw0@a0gvlNoi
ALYacGen:Variant.Zusy.352211
VBA32TrojanDropper.Agent
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_FRS.0NA103IG20
RisingMalware.FakeXLS/ICON!1.9C3D (CLASSIC)
YandexTrojan.GenAsa!/qL7q/tqcCw
IkarusTrojan.Agent
FortinetW32/Generic.AC.3F7849!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.2581853073?

Malware.AI.2581853073 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment