Malware

Malware.AI.2923231590 removal guide

Malware Removal

The Malware.AI.2923231590 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2923231590 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • At least one process apparently crashed during execution
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine Malware.AI.2923231590?


File Info:

name: 613E77FB0ECB42C40F1D.mlw
path: /opt/CAPEv2/storage/binaries/90efeb9eee04163e44941a341cf4b69c3152d5bc46c799638b902ecc9fbbc754
crc32: 6918D016
md5: 613e77fb0ecb42c40f1d976992a53e4b
sha1: 918d829429217d78c4f2b98f69ae51093f020d01
sha256: 90efeb9eee04163e44941a341cf4b69c3152d5bc46c799638b902ecc9fbbc754
sha512: 4ce3aa43e430c55b67999c7a040972cdebd339d291237574add5c4cd0ebab3f674e160352806550c3590cd95de37041fe9548c26750690631a86e0ab5eb895fb
ssdeep: 12288:Kc71gjtw6ZzVIdW6Wk98AuCE/Ewqr0uNWFn2ofm/NVxZDSqZ+XhLsa+TbODSDHmY:Kc9SLCQFExZDSqZ+yHmBa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A259312E7F82891D2A14077C2FABA11292907712BB58BC3CFC37E9B3157DE258769D1
sha3_384: 432820dc97b4ec7adf4a5efbf987b10def7e72db64776cf51068fc559c8e8f4b3cd95fc6eea1a6e92ac5141da81b2d06
ep_bytes: e85e050000e97afeffffcccccccccccc
timestamp: 2020-10-23 17:34:02

Version Info:

CompanyName:
FileDescription:
FileVersion: Demo v1.0 REV2
LegalCopyright:
Translation: 0x0400 0x04b0

Malware.AI.2923231590 also known as:

MicroWorld-eScanGen:Variant.Bulz.224891
FireEyeGen:Variant.Bulz.224891
ALYacGen:Variant.Bulz.224891
ZillyaTrojan.Keylogger.Win32.69645
Cybereasonmalicious.b0ecb4
SymantecTrojan.Gen.2
TrendMicro-HouseCallTROJ_GEN.R002H09KP21
BitDefenderGen:Variant.Bulz.224891
Ad-AwareGen:Variant.Bulz.224891
McAfee-GW-EditionBehavesLike.Win32.Dropper.fh
EmsisoftGen:Variant.Bulz.224891 (B)
GDataGen:Variant.Bulz.224891
JiangminTrojanSpy.KeyLogger.nqf
MAXmalware (ai score=85)
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Trojan/Win32.RL_KeyLogger.R358946
McAfeeGenericRXAA-AA!613E77FB0ECB
TACHYONTrojan/W32.KeyLogger.1025536
VBA32BScope.TrojanSpy.Keylogger
MalwarebytesMalware.AI.2923231590
APEXMalicious
IkarusTrojan.SPY.KeyLogger

How to remove Malware.AI.2923231590?

Malware.AI.2923231590 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment