How to remove “Malware.AI.2812764114”?

The Malware.AI.2812764114 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2812764114 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.2812764114?


File Info:
name: DEA0B0840DA388E19227.mlw
path: /opt/CAPEv2/storage/binaries/9a9e0055f39b82ee0da9dc4ff97838876fb97204a885b88a571639dc9c3ddd04
crc32: F1A63964
md5: dea0b0840da388e1922774b5848f8816
sha1: 1efa789b7f8fac3b7a11723c52d3a4f56ad71edb
sha256: 9a9e0055f39b82ee0da9dc4ff97838876fb97204a885b88a571639dc9c3ddd04
sha512: 3b93f61f52e7ebbd9a89eaed1734922dd1ab9b14aa9b01f61cebfea598070a80be7d3a0ada94360f2fdea2ed756867a87504df100665ac7f70b4f12fefb37070
ssdeep: 24576:+NJFYWxvWSyPwb0o8Egtgj2WtlObPVqSQRrS1wnOl+Uui7GRnu:YYWxCaLvjTvsPVFknk+UuiaRnu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12625F17D23E39E62CF19C2FCC1E3712417677E8B2231C342196432C56E22BDB556AA97
sha3_384: 020b0da29e571cfe36d240a22febb38fab1aef64c75431566b696c0604ceb657e9a1786a5287e03b91b6a7b8943437fd
ep_bytes: ff250020400000000000000000000000
timestamp: 2087-05-27 17:05:05

Version Info:
Translation: 0x0000 0x04b0
Comments: Important! This UI has been first made for Lynx as CustomUI. All classes named LYNX is not from Official Exploit Release! This is my oldest custom UI Projects! DareQPlaysRBX#1001
CompanyName: 
FileDescription: SyntaXCovertV2
FileVersion: 1.0.0.0
InternalName: SyntaXCovert - Remastered.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: SyntaXCovert - Remastered.exe
ProductName: SyntaXCovertV2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.2812764114 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.85170
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	GenericRXQK-DJ!DEA0B0840DA3
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 00550e351 )
K7GW	Unwanted-Program ( 00550e351 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/DllInject.ADR potentially unsafe
APEX	Malicious
BitDefender	Gen:Variant.Lazy.85170
Avast	Win32:MiscX-gen [PUP]
Sophos	Generic PUA BO (PUA)
Zillya	Trojan.DllInject.Win32.13844
TrendMicro	TROJ_GEN.R002C0PJM21
McAfee-GW-Edition	GenericRXQK-DJ!DEA0B0840DA3
FireEye	Generic.mg.dea0b0840da388e1
Emsisoft	Gen:Variant.Lazy.85170 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Lazy.85170
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4630440
ALYac	Gen:Variant.Lazy.85170
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.2812764114
TrendMicro-HouseCall	TROJ_GEN.R002C0PJM21
Rising	Malware.Obfus/MSIL@AI.92 (RDM.MSIL:y516NTuO7sSANEY8tkpShA)
Yandex	Riskware.Agent!yInXfznZtQ8
eGambit	Unsafe.AI_Score_100%
Fortinet	Adware/DllInject
AVG	Win32:MiscX-gen [PUP]
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.2812764114?

Malware.AI.2812764114 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X