Malware.AI.4101859028 removal

The Malware.AI.4101859028 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4101859028 virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4101859028?

File Info:
name: D6EEFD9B54789AC7CB67.mlw
path: /opt/CAPEv2/storage/binaries/f882f64246c2fddb5e98fab84d8015c90e58235fcfd3c0f211d914cd27d16280
crc32: 6EA72B22
md5: d6eefd9b54789ac7cb67396572f86fda
sha1: 26a84027d354b58a8a64f52498042dd39c9e1fbb
sha256: f882f64246c2fddb5e98fab84d8015c90e58235fcfd3c0f211d914cd27d16280
sha512: c007be850c9fcf72728d3a542948d28d3dd084c7130b8a6d8b88929b59ec78f5d0b1988f343519a689addaaf5896b5fa2a6cae21c47ea95113f0438632aee03e
ssdeep: 6144:Vzv+kSZBbdH19ex4T02J4fqz22tvymTiB62iKnWKKmDTcNwjreOYXo:VzcRD02J4Sq2vHGB67KWKKmD5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12244239E8ABEAE2FCD6A4F7762A73AD30074BE92513C47113F704417AD9E99171C8360
sha3_384: 632b5d4087708cef3169a4af2eaacde1202872f0ff6de8cde3470c664d5b1055cb457672cb147941a4d886c01b3ec97d
ep_bytes: 60be001047008dbe0000f9ff57eb0b90
timestamp: 2011-12-23 10:59:31

Version Info:
FileVersion: 1.0
FileDescription: Wasp Launcher
LegalCopyright: © Lt-Web Inc.
OriginalFilename: launcher.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 1.0
Translation: 0x0809 0x04b0

Malware.AI.4101859028 also known as:

How to remove Malware.AI.4101859028?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.