Malware

How to remove “Malware.AI.311800191”?

Malware Removal

The Malware.AI.311800191 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.311800191 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

How to determine Malware.AI.311800191?


File Info:

crc32: 6A916E7C
md5: 6d9fb88c2226ef04bc7f5a06fccc88e0
name: 6D9FB88C2226EF04BC7F5A06FCCC88E0.mlw
sha1: d498b0632813a1fb4c51eb040446a48bb2ad4db8
sha256: 75c9cb38dc2b3103b7724f33b16f618cf05973e03b16c52c4ab0e6c0a99d9bb9
sha512: d5d375df46cd62ece128c2addd80fd11c3d958371ade627c21db9fbdc57f082236f154d8be8331ddffc5b6f8162c206226f3129edb91bcfff45885b27a87dd1c
ssdeep: 3072:GkSnhiViKCiB+4nY006zYf4JzP6kkt4UjwIirqyYaT5hT:lMC44nY070qD6kkqsiLr
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Malware.AI.311800191 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00577ea11 )
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.49853
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.866116
CylanceUnsafe
ZillyaTrojan.GenKryptik.Win32.94646
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Copak.30a8ff44
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.c2226e
CyrenW32/Kryptik.ECM.gen!Eldorado
ESET-NOD32a variant of Win32/GenKryptik.CTNW
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Packed.Razy-9867638-0
KasperskyHEUR:Trojan.Win32.Copak.vho
BitDefenderGen:Variant.Razy.866116
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanGen:Variant.Razy.866116
TencentWin32.Trojan.Copak.Wsax
Ad-AwareGen:Variant.Razy.866116
SophosML/PE-A + Troj/Agent-BGOS
BitDefenderThetaGen:NN.ZexaF.34266.kuZ@aGo3wXi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R032C0RH221
McAfee-GW-EditionBehavesLike.Win32.RAHack.cc
FireEyeGeneric.mg.6d9fb88c2226ef04
EmsisoftGen:Variant.Razy.866116 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.leh
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_93%
Antiy-AVLTrojan/Generic.ASMalwS.34712EE
MicrosoftTrojan:Win32/Ditertag.A
ArcabitTrojan.Razy.DD3744
GDataGen:Variant.Razy.866116
AhnLab-V3Malware/Win32.RL_Generic.R293305
Acronissuspicious
McAfeeArtemis!6D9FB88C2226
MAXmalware (ai score=89)
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.311800191
TrendMicro-HouseCallTROJ_GEN.R032C0RH221
RisingTrojan.Injector!1.CD26 (CLASSIC)
YandexTrojan.Agent!hNgH7tbf1WU
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HxMBueAA

How to remove Malware.AI.311800191?

Malware.AI.311800191 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment