Malware

Malware.AI.2752021425 removal

Malware Removal

The Malware.AI.2752021425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2752021425 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2752021425?


File Info:

name: 897B0125FD6CFEC7486E.mlw
path: /opt/CAPEv2/storage/binaries/c688542c4463c8062e937c34971338fd90f730dae9470f8b7baab5d5c02eedd7
crc32: 98D56361
md5: 897b0125fd6cfec7486e8d6e248efb24
sha1: ff972b2a4c29b7257585a419478dc62794bfd0f4
sha256: c688542c4463c8062e937c34971338fd90f730dae9470f8b7baab5d5c02eedd7
sha512: 69be125896b2a451e53fbd584091196d00d20cf1f496ca10266a08075848d7a54d83a6685204fb2405ef263c22a992648565c3fb51f406b44733abdcb068d160
ssdeep: 768:ZbkWcL/LzMrYCeefzdB6NN46Ag6BqJ+NCYEwfk/:ZbkXL/Ii4dB4q2J+Y6k/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8237E0278A0C073C85685B059B5C552AE7FBE121FE5C08B7B9D329E9F71BD25B3A309
sha3_384: 435768d3f3b4aafcb03b6b3f4cf9e35def5c335d92026ec59ca04c7c2d846abc69fa14addb060e42b496a1bb5ff7c4be
ep_bytes: e841150000e979feffffe9acd400005d
timestamp: 2012-03-15 11:39:12

Version Info:

0: [No Data]

Malware.AI.2752021425 also known as:

LionicTrojan.Win32.Zusy.4!c
MicroWorld-eScanTrojan.GenericKD.67489764
FireEyeTrojan.GenericKD.67489764
McAfeeRDN/Generic.dx
MalwarebytesMalware.AI.2752021425
SangforTrojan.Win32.Wacatac.V57o
K7AntiVirusTrojan ( 005a55271 )
AlibabaTrojan:Win32/Generic.3e03c20d
K7GWTrojan ( 005a55271 )
CyrenW32/Zusy.QI.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.BDR
BitDefenderTrojan.GenericKD.67489764
AvastWin32:Evo-gen [Trj]
TencentPacked.Win32.Agent.kkh
EmsisoftTrojan.GenericKD.67489764 (B)
F-SecureTrojan.TR/Agent_AGen.gtvkd
VIPRETrojan.GenericKD.67489764
TrendMicroTROJ_GEN.R002C0PEH23
McAfee-GW-EditionBehavesLike.Win32.Generic.ph
SophosMal/Generic-S
IkarusTrojan.Win32.Agent
GDataWin32.Trojan.PSE.1PDC7HH
AviraTR/Agent_AGen.gtvkd
MAXmalware (ai score=82)
Antiy-AVLTrojan/Win32.Wacatac
ArcabitTrojan.Generic.D405CFE4
ViRobotTrojan.Win.Z.Wacatac.49520.BV
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R577447
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PEH23
RisingTrojan.Generic@AI.100 (RDML:UzJRTGRqEC2TDSpOOrUWzw)
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Wacatac.B!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.2752021425?

Malware.AI.2752021425 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment