Malware

Malware.AI.30491124 information

Malware Removal

The Malware.AI.30491124 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.30491124 virus can do?

  • Executable code extraction
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Malware.AI.30491124?


File Info:

crc32: 25E63BDD
md5: c2dee2b6658df9ef062cf05afdcf93d1
name: C2DEE2B6658DF9EF062CF05AFDCF93D1.mlw
sha1: 83dc51c5f71a36b34888b963e29f6e1c9f55b4b6
sha256: 8b963f78ddaf1ed87b85194dec1ccaf5c3466eec73f53ec214a9b5c81b45692f
sha512: 8d63118dbb0fc69f024562783df74fab61afe97cdbc1fba4d524cc046aebed931b0440ec99df27df40591cbf70c7055a77c6b44809a7f67d9dd945bb5559b5cf
ssdeep: 6144:C8QVQ0yyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWy:C83yUf9DRKlqgErIsKnPmb7/jWa1e+5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 1.00
Translation: 0x0409 0x04b0

Malware.AI.30491124 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusEmailWorm ( 0054d10f1 )
Elasticmalicious (high confidence)
DrWebWorm.Siggen.11987
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.195571
CylanceUnsafe
SangforWin.Trojan.Changeup-6169544-0
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaWorm:Win32/Vobfus.e0eb013a
K7GWEmailWorm ( 0054d10f1 )
Cybereasonmalicious.6658df
BaiduWin32.Virus.Virut.gen
CyrenW32/Vobfus.AA.gen!Eldorado
SymantecW32.Changeup
ESET-NOD32Win32/Virut.NBP
APEXMalicious
TotalDefenseWin32/FakeFLDR_i
AvastWin32:Vitro [Inf]
ClamAVWin.Trojan.VB-73740
KasperskyWorm.Win32.Vobfus.evfh
BitDefenderGen:Variant.Bulz.195571
NANO-AntivirusTrojan.Win32.Vobfus.ewhyaa
ViRobotTrojan.Win32.A.Diple.253952.DC
SUPERAntiSpywareTrojan.Agent/Gen-AutoRun
MicroWorld-eScanGen:Variant.Bulz.195571
TencentTrojan.Win32.FakeFolder.gcy
Ad-AwareGen:Variant.Bulz.195571
SophosML/PE-A + W32/SillyFDC-GS
ComodoWorm.Win32.VB.AUA@4o7zkg
BitDefenderThetaGen:NN.ZevbaF.34608.pq1@ayXRb@ci
VIPRETrojan.Win32.Vobfus.paa (v)
TrendMicroWORM_VOBFUS.SMAB
McAfee-GW-EditionVBObfus.er
FireEyeGeneric.mg.c2dee2b6658df9ef
EmsisoftGen:Variant.Bulz.195571 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Kazy.502564
MicrosoftWorm:Win32/Vobfus.gen!O
ArcabitTrojan.Bulz.D2FBF3
AegisLabWorm.Win32.WBNA.low6
GDataGen:Variant.Bulz.195571
AhnLab-V3Trojan/Win32.Diple.R18781
Acronissuspicious
McAfeeVBObfus.er
MAXmalware (ai score=85)
VBA32BScope.TrojanRansom.Blocker
MalwarebytesMalware.AI.30491124
PandaTrj/Genetic.gen
TrendMicro-HouseCallWORM_VOBFUS.SMAB
RisingWorm.VobfusEx!1.99DC (CLOUD)
YandexTrojan.GenAsa!J9URsE4Z4kc
IkarusWorm.Win32.Vobfus
FortinetW32/Virtu.F
AVGWin32:Vitro [Inf]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Kazy.HgIASOMA

How to remove Malware.AI.30491124?

Malware.AI.30491124 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment