Malware

Should I remove “Malware.AI.2921794481”?

Malware Removal

The Malware.AI.2921794481 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2921794481 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.2921794481?


File Info:

crc32: 6A7DB29B
md5: 1f9db0137245508d4ad475170c4811f5
name: 1F9DB0137245508D4AD475170C4811F5.mlw
sha1: 7f8f0bbd941bc101a114220e4f296bd58a96a494
sha256: 24d79b2f4a2aba518237343b7b94b817f51de0afc1e40236a4c267657b113849
sha512: 30a04716757e1ba2ef707fcbeb7997922223cb6f06b3820aa1df65ef572360d6122652737eece8baa92d2b6a21e41c536be02fb6f8f4a0f529c3775018ba5956
ssdeep: 12288:mXe9PPlowWX0t6mOQwg1Qd15CcYk0We1k/IPlFQ7HqOq4RfjQtjgZSFyG11:7hloDX0XOf4uwtFjKRfjcgZSFB11
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

Translation: 0x0809 0x04b0

Malware.AI.2921794481 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
Cybereasonmalicious.d941bc
CyrenW32/Autoit.TO.gen!Eldorado
APEXMalicious
AvastFileRepMetagen [Malware]
ClamAVWin.Malware.Noon-9888778-0
KasperskyUDS:Trojan-Spy.Win32.Noon
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.hc
FireEyeGeneric.mg.1f9db0137245508d
JiangminExploit.BypassUAC.bir
MicrosoftTrojan:Script/Phonzy.C!ml
AhnLab-V3Trojan/Win.Generic.C4609890
McAfeeArtemis!1F9DB0137245
MalwarebytesMalware.AI.2921794481
FortinetAutoIt/Agent.DCCC!tr
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Malware.AI.2921794481?

Malware.AI.2921794481 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment