Malware.AI.299744275 (file analysis)

The Malware.AI.299744275 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.299744275 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.299744275?


File Info:
name: 1F2F0ED6F35775650C8A.mlw
path: /opt/CAPEv2/storage/binaries/acd4139186b266438f7803732913ccbf5d98e2c53ca67b7d0b513aeab45a8e3d
crc32: FF567A9B
md5: 1f2f0ed6f35775650c8aba5279841e5e
sha1: 68c0fab1c12914f784b4de8c9e9fdfb342b5f9b3
sha256: acd4139186b266438f7803732913ccbf5d98e2c53ca67b7d0b513aeab45a8e3d
sha512: 0c137cd699c2001d3183f9b8d162362cd6a7c3c4a787ee672f838f0c6a347aa14fa72deeb0380f7f2b6973739acf5c0aa20dad93162e0ef5fa631b6ff24a1d08
ssdeep: 3072:UW0fZ3onpkGCAdI/Ts/wzwbFiJvnqnpiuh:UW2o28I/LzuFiJPqnpiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C0048F628970BB13E951093517E06BFB801D3C2F4BE5060A7CAEDA5F3763D9A349F942
sha3_384: d6600cb3fcb8637cf5c3ed2a56cb30eeb599b190ecefe5042fd86d42b9ac8054fb8a5eecb9e232c2b483259b84651a31
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:
0: [No Data]

Malware.AI.299744275 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.525620
ClamAV	Win.Malware.Midie-6847892-0
FireEye	Generic.mg.1f2f0ed6f3577565
CAT-QuickHeal	Trojan.MuldVMF.S21469993
Skyhigh	BehavesLike.Win32.Generic.ct
McAfee	GenericRXHC-SS!1F2F0ED6F357
Malwarebytes	Malware.AI.299744275
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 005690671 )
K7GW	Trojan ( 005690671 )
Cybereason	malicious.1c1291
Arcabit	Trojan.Zusy.D80534
BitDefenderTheta	AI:Packer.1DDCF60A20
VirIT	Trojan.Win32.VBUCornT.DRP
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FNGV
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.525620
NANO-Antivirus	Trojan.Win32.Banker1.fnwqkb
SUPERAntiSpyware	Trojan.Agent/Gen-Strictor
Avast	Win32:VB-AJKU [Trj]
Tencent	Trojan.Win32.VB.ko
Emsisoft	Gen:Variant.Zusy.525620 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.MulDrop17.61497
VIPRE	Gen:Variant.Zusy.525620
TrendMicro	TROJ_GEN.R03BC0DLQ23
Sophos	Mal/VB-AQT
Ikarus	Trojan.Crypt
Jiangmin	Trojan.VB.aqyg
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Wacatac.b
Kingsoft	malware.kb.a.992
Microsoft	TrojanDropper:Win32/Muldrop.V!MTB
ZoneAlarm	UDS:Trojan.Win32.Generic
GData	Win32.Trojan.VBClone.C
Varist	W32/VB_Troj.J.gen!Eldorado
AhnLab-V3	Trojan/Win32.Agent.R252862
VBA32	SScope.Trojan.VB
ALYac	Gen:Variant.Zusy.525620
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0DLQ23
Rising	Trojan.VBClone!1.E032 (CLASSIC)
Yandex	Trojan.GenKryptik!q7iBUf/GAxk
SentinelOne	Static AI – Malicious PE
Fortinet	W32/VBClone.D!tr
AVG	Win32:VB-AJKU [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.299744275?

Malware.AI.299744275 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X