Malware

How to remove “Malware.AI.2932439867”?

Malware Removal

The Malware.AI.2932439867 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2932439867 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Executed a process and injected code into it, probably while unpacking
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.2932439867?


File Info:

crc32: 67563D67
md5: edb018120d549f1bb65fdc5d0e904d82
name: EDB018120D549F1BB65FDC5D0E904D82.mlw
sha1: 7edace9d75b77c59ffc275631bd43042336f3476
sha256: 032c5f0a18c854bb58201dfc10d10c1b0e32f759903dc50feef2bece297f33d8
sha512: 5537a9a5ecc89c79fa450563ed7e98877b3df3fdb7f1bebff377ab75f91d05f459a8f5f4642730c9cf6eaade63fa5b849687baeba2109696e9991145a9ce0a71
ssdeep: 1536:rHsp2IpJXSsCUVuqjfTZ4aTfvq+nKt5edyFO/R0baUrzGDexO/D8Xqy8YPwE4pd:iJXSsC+p714R+8edyNiL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 x1e08x43bx49bx4e8bx9769x9aa8x443x3072x43ex3046x431x430x4e7x431x307fx307fx4e8ax40fx437x437x304fx400x40ax3046x43bx433x416x1e06x4e7x409 2014
Assembly Version: 1.2.3.4
InternalName: stub.exe
FileVersion: 5.6.7.8
CompanyName: x442x3046x304dx96e3x434x307ex440x428x431x1e06x306fx4e7x400x3053x307bx416x3d0x428x435x9802x43ex3081x1e14x435x3cex4e8bx9aa8x437x49e
LegalTrademarks:
Comments: x435x443x43ax1e12x430x431x1e14x4e8bx96e3x428x4e7x416x3048x424x442x4e88x438x43bx4b6x424x307ex306fx434x441x3cex400x433x3cex4e89x4e0e
ProductName: x40fx417x4e7x40ax1e12x96e3x4e7x433x4e7x3082x56dbx304bx400x3053x49bx40ax40ax438x400x3075x4e8x3053x304bx3cex49ex43bx4e9x3072x307e
ProductVersion: 5.6.7.8
FileDescription: x1e08x43bx49bx4e8bx9769x9aa8x443x3072x43ex3046x431x430x4e7x431x307fx307fx4e8ax40fx437x437x304fx400x40ax3046x43bx433x416x1e06x4e7x409
OriginalFilename: stub.exe

Malware.AI.2932439867 also known as:

LionicTrojan.Win32.Generic.4!c
DrWebTrojan.VbCrypt.68
CynetMalicious (score: 99)
ALYacGen:Variant.MSILPerseus.1044
CylanceUnsafe
SangforTrojan.MSIL.Injector.CMQ
CrowdStrikewin/malicious_confidence_80% (D)
Cybereasonmalicious.20d549
CyrenW32/Trojan.FDW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.CMQ
APEXMalicious
AvastMSIL:GenMalicious-FJ [Trj]
ClamAVWin.Packed.Generic-9865070-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.MSILPerseus.1044
NANO-AntivirusTrojan.Win32.MSILPerseus.eysttz
MicroWorld-eScanGen:Variant.MSILPerseus.1044
TencentWin32.Trojan.Generic.Aoiy
Ad-AwareGen:Variant.MSILPerseus.1044
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34294.im0@aO1BI4h
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGeneric.dpz
FireEyeGeneric.mg.edb018120d549f1b
EmsisoftGen:Variant.MSILPerseus.1044 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1111853
Antiy-AVLTrojan/Generic.ASMalwS.24E4AC4
MicrosoftTrojan:MSIL/Bladabindi
GDataGen:Variant.MSILPerseus.1044
McAfeeGeneric.dpz
MAXmalware (ai score=97)
MalwarebytesMalware.AI.2932439867
PandaTrj/GdSda.A
IkarusTrojan.MSIL.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.CMQ!tr
AVGMSIL:GenMalicious-FJ [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.2932439867?

Malware.AI.2932439867 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment