Malware.AI.44649378 removal

The Malware.AI.44649378 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.44649378 virus can do?

Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.44649378?


File Info:
name: 031589EE09C3DCB21BD2.mlw
path: /opt/CAPEv2/storage/binaries/b613bcdd287be0f78308ede1d5d738d50e99bd26fadb4ccfee59520af21c50bf
crc32: DCEBE11C
md5: 031589ee09c3dcb21bd237bf0a172d60
sha1: f2de9132eeb2e9cae8b433e733e8bee7dea8bfc1
sha256: b613bcdd287be0f78308ede1d5d738d50e99bd26fadb4ccfee59520af21c50bf
sha512: 36895e1c572dded67c6602535f2667601bad6ee520f55a28fb72af4b45e44f0fff92971e71e78d67af61336d0cdb34b28d714210fd336348ced828c237c93ca1
ssdeep: 49152:WQiA3m7W4ICIQ865pRyhjpERk5VWqpty15lL9OK:KQPSIQ80RGSRk5ztyft9OK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T149950217F3818576D03189B98C26A094AF2BBD201EF1241E3EF4FB4D4E7A65358367A7
sha3_384: 8f2511c4cf669d814ceb4f60644f27fbd5b872ebc85dc75be3fb93cf5fa5ea3cbb02894c76a50de259d17faeee4ac23f
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2014-07-09 07:58:13

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: 小新日历                                                        
FileDescription: 小新日历最专业日历应用平台                                               
FileVersion: 2014.0903.1726.20   
LegalCopyright: Copyright © 2012-2014 小新日历, Inc.                                                                    
ProductName: 小新日历                                                        
ProductVersion: 4.0                                               
Translation: 0x0000 0x04b0

Malware.AI.44649378 also known as:

Lionic	Trojan.Win32.CDur.lxkN
MicroWorld-eScan	Trojan.GenericKD.33774616
FireEye	Trojan.GenericKD.33774616
McAfee	Artemis!031589EE09C3
Cylance	Unsafe
Cybereason	malicious.e09c3d
Cyren	W32/A-061fc660!Eldorado
Symantec	SecurityRisk.gen1
TrendMicro-HouseCall	TROJ_GEN.R03BH09KP21
BitDefender	Trojan.GenericKD.33774616
Ad-Aware	Trojan.GenericKD.33774616
Sophos	Generic PUA PC (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
Emsisoft	Trojan.GenericKD.33774616 (B)
GData	Trojan.GenericKD.33774616
MAX	malware (ai score=89)
Gridinsoft	Ransom.Win32.Gen.sa
ALYac	Trojan.GenericKD.33774616
VBA32	TrojanDownloader.Adload
Malwarebytes	Malware.AI.44649378
Yandex	Trojan.GenAsa!54bHGPUDG8w
Ikarus	Trojan.SuspectCRC
Fortinet	W32/PossibleThreat
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.44649378?

Malware.AI.44649378 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X