How to remove “Malware.AI.419038779”?

The Malware.AI.419038779 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.419038779 virus can do?

Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.419038779?


File Info:
name: 9AA6D26B19C0E55D0D66.mlw
path: /opt/CAPEv2/storage/binaries/45ecad3e4c8f14386a9d0c2fe308d3ad5be85ef0385469d5c17d12bc3917ea25
crc32: 79E27A79
md5: 9aa6d26b19c0e55d0d66a23cd812de23
sha1: ec213f763a68c0e2516930ca7ad56404b35aeef4
sha256: 45ecad3e4c8f14386a9d0c2fe308d3ad5be85ef0385469d5c17d12bc3917ea25
sha512: aab64e99fd7c6796511900a28f8ce21c291375c9959d86bbf6bf1ce5dad64f1b60315f4a44904c2367720e3cab8c6b212f6924a85051ab669cf0ae74ba07223f
ssdeep: 12288:CWYqnwTrE4888888888888W88888888888cfPCKqLo2H0SqlTQu6Hn25w+sfg5wD:xYqwTY9qLxH0TTQu6u2I5WbdrKoMzz8n
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T176E40202A7C74C72F17A09B8986DD148BC2FBA782ED0601B6DFDDD4D04BE2D25C759A2
sha3_384: a806694f6b0350b9b1bd405fa5cc433edf3f095cdb19e3cfdd89056962a436744e6116c906cd421a4628789b31e4e256
ep_bytes: 558becb9080000006a006a004975f953
timestamp: 2013-10-31 10:13:11

Version Info:
CompanyName: IObit
FileDescription: Driver Backup Package
FileVersion: 1.1.0.0
InternalName: UpdateDB
LegalCopyright: Copyright© 2013 IObit. All Rights Reserved.
LegalTrademarks: IObit
OriginalFilename: SfxStub.exe
ProductName: Driver Booster
ProductVersion: 1.1.0.0
Comments: Driver Database Updater
Translation: 0x0409 0x04e4

Malware.AI.419038779 also known as:

Bkav	W32.AIDetectMalware
Malwarebytes	Malware.AI.419038779
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	AI:Packer.759C860817
Cyren	W32/Jacard.A.gen!Eldorado
Elastic	malicious (moderate confidence)
APEX	Malicious
ClamAV	Win.Dropper.Genericrxjd-9884871-0
Rising	Trojan.Generic@AI.100 (RDML:yPCUITGZ7elfVfhmzDopVA)
McAfee-GW-Edition	BehavesLike.Win32.Worm.jc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Packed.Dico.dxt
Google	Detected
Cynet	Malicious (score: 100)
McAfee	Artemis!9AA6D26B19C0
VBA32	Trojan.Wacatac
Cylance	unsafe
Ikarus	Trojan.Yarwi
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.YARW!tr
Cybereason	malicious.63a68c
DeepInstinct	MALICIOUS

How to remove Malware.AI.419038779?

Malware.AI.419038779 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X