About “Malware.AI.301977279” infection

The Malware.AI.301977279 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.301977279 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.301977279?


File Info:
name: 55281620BB6C71BE774D.mlw
path: /opt/CAPEv2/storage/binaries/5e9665d262860bccf2151026a89fc56ea811012b75e5ff430bbb5c3dd9f9f853
crc32: AA6365B1
md5: 55281620bb6c71be774d9027cbd908a7
sha1: 370c42cf418f659c96fe75e96579070cf6cea671
sha256: 5e9665d262860bccf2151026a89fc56ea811012b75e5ff430bbb5c3dd9f9f853
sha512: f49d6c0f1b4aadbe9242535099167365054af86baa537a72b0f29d40bfc860db9de640a74a7645715358cf7da96e30dfe73d6c174991a20109cadbdd83396cad
ssdeep: 24576:W8OjdPjO7KX53RTh0tFda3gtUcazumXRLssVf1kDrRoNk7BZpWmDtaLg/DRZhf0Y:NORrOO53RTqtid9VfWDrRokpWmDta4
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18B856B0DFFA08C32D56312318CAAA3AD517ABDB04B21869B62887F1DDD71FD1A935707
sha3_384: 8d4b0aa559e2f2194eda27fb4aa5b47f7b5995077567e6e31572f36e8026ced8944e1532298367a4355e20676eb7eee3
ep_bytes: e829040000e9a9fdffffcccccccccc8b
timestamp: 2016-01-29 01:25:53

Version Info:
Platform: NT
LegalTrademarks: Microsoft SQL Server is a registered trademark of Microsoft Corporation.
Comments: SQL
GoldenBits: False
CompanyName: Microsoft Corporation
FileDescription: SQL External minidumper
FileVersion: 2011.0110.9167.944 ((BI_Office_Stab).160128-1649)
InternalName: SqlDumper
LegalCopyright: Microsoft Corp. All rights reserved.
OriginalFilename: SqlDumper.exe
ProductName: Microsoft SQL Server
ProductVersion: 11.0.9167.944
Translation: 0x0409 0x04b0

Malware.AI.301977279 also known as:

Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
McAfee	GenericRXOQ-HQ!55281620BB6C
Cylance	Unsafe
Cybereason	malicious.f418f6
Cyren	W32/Bladabindi.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-9870238-0
Avast	FileRepMalware
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Ikarus	Backdoor.Win32.Bladabindi
Jiangmin	Trojan.Ulise.x
Avira	HEUR/AGEN.1141745
Antiy-AVL	Trojan/Generic.ASBOL.C6BA
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Win32.Trojan.Agent.YO728O
Cynet	Malicious (score: 100)
Malwarebytes	Malware.AI.301977279
TrendMicro-HouseCall	TROJ_GEN.R03BH0CL621
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Bladabindi.F676!tr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Malware.AI.301977279?

Malware.AI.301977279 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X