Malware.AI.4106871555 malicious file

The Malware.AI.4106871555 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4106871555 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.4106871555?


File Info:
name: 39BFCF9C9F4F93E9C273.mlw
path: /opt/CAPEv2/storage/binaries/6cfbe30df2c138f6f3bbbbbf36b1fa319b419eb5d5e66eea6e27b3f8f70d9f2f
crc32: E5C7C052
md5: 39bfcf9c9f4f93e9c2734b1f71a4a456
sha1: 7735f1c2b6e1122786ee847281fab6ceba434640
sha256: 6cfbe30df2c138f6f3bbbbbf36b1fa319b419eb5d5e66eea6e27b3f8f70d9f2f
sha512: 0a1554b5c014e9a68d97abefcde1820b1342e529e8bd1e5340e37d0f7785c351735341b87199d062fe1591fd0b2a023ba4514ecf2eee12118031ce75ebf9f170
ssdeep: 12288:hFVa4d9jO/Wao3Wxx/79AZZQ55W+C6A1jQ5:s4d9jO/WaZxx/72ZZw5W+C0
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1DD94E0A028F774D2FC32C57DB8DB0656B517308B7AC5BF6FB32A92993595380329B901
sha3_384: c9fd462a661e482724a8babd471642df2f473571f9bf5178e7c30615cec61df77aacb9603b9c019d5ca5b163de7fa3c1
ep_bytes: 43544750514fbc600000000000000065
timestamp: 2020-08-15 17:22:00

Version Info:
Comments: Java Access Bridge
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 8.0.2810.9
Full Version: 1.8.0_281-b09
InternalName: jabswitch
LegalCopyright: Copyright © 2020
OriginalFilename: jabswitch.exe
ProductName: Java(TM) Platform SE 8
ProductVersion: 8.0.2810.9
Translation: 0x0409 0x04b0

Malware.AI.4106871555 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Win64.Expiro.Gen.6
FireEye	Generic.mg.39bfcf9c9f4f93e9
Cylance	Unsafe
K7AntiVirus	Virus ( 00535e4a1 )
BitDefender	Win64.Expiro.Gen.6
K7GW	Virus ( 00535e4a1 )
CrowdStrike	win/malicious_confidence_90% (D)
Cyren	W64/Expiro.R.gen!Eldorado
ESET-NOD32	a variant of Win64/Expiro.CO
APEX	Malicious
ClamAV	Win.Virus.Expiro-9887894-0
Kaspersky	HEUR:Virus.Win64.Expiro.gen
NANO-Antivirus	Virus.Win64.Expiro.clnvwd
Avast	Win64:Xpirat [Inf]
Ad-Aware	Win64.Expiro.Gen.6
DrWeb	Win64.Expiro.134
TrendMicro	Virus.Win64.EXPIRO.MR
Emsisoft	Win64.Expiro.Gen.6 (B)
SentinelOne	Static AI – Malicious PE
GData	Win64.Expiro.Gen.6
Jiangmin	Trojan.Bingoml.avt
Avira	W64/Infector.Gen
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASVirus.307
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Win64.Expiro.Gen.6
Malwarebytes	Malware.AI.4106871555
TrendMicro-HouseCall	Virus.Win64.EXPIRO.MR
Ikarus	Virus.Win64.Expiro
Fortinet	W64/Expiro.CE
AVG	Win64:Xpirat [Inf]
Cybereason	malicious.c9f4f9
MaxSecure	virus.win64.expiro.gen

How to remove Malware.AI.4106871555?

Malware.AI.4106871555 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X