Malware.AI.491600201 removal guide

The Malware.AI.491600201 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.491600201 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.491600201?


File Info:
name: 7E825E35601004BC73DB.mlw
path: /opt/CAPEv2/storage/binaries/579c2e02af8733ce7e92bd43c1b3c57715ab583395f56f9d0df548ba28a0b32f
crc32: FB2EFE60
md5: 7e825e35601004bc73db2c9c5076575e
sha1: 63373d131f6e35fdd40d44a8370d4827d832537e
sha256: 579c2e02af8733ce7e92bd43c1b3c57715ab583395f56f9d0df548ba28a0b32f
sha512: 655a8912e41a7361f8caf2a9a98bd79a134dafd3707d86bece48808978184835a7e7a0755d8ad94c7bae427a71b28fba26dec7f15cb757eccccface4b3c00767
ssdeep: 3072:JE/6RZk0KW0unwCrr6wjGhgcIf6RZk0KWSu+d8qY:JDLlVrr6wF4L71q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18F45515E7611B27BC29D41744C3BBA9B187B7C049412EB0776EFF2BB831E28C1948D96
sha3_384: f0dad895e9a39a5d6afbee744af57e5530da9b4179a636f1201f7baffade4156f89e9d1a5467a3e27fcf42385f6e7e66
ep_bytes: ff250020400000000000000000000000
timestamp: 2092-10-24 19:14:59

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Tricky House
FileVersion: 1.0.0.0
InternalName: Tricky House.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: Tricky House.exe
ProductName: Tricky House
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.491600201 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.WacatacFC.S19436270
Cylance	Unsafe
Sangfor	Trojan.Win32.Ymacco.AA57
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.HYJ
Avast	Win32:TrojanX-gen [Trj]
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	GenericRXNT-UP!7E825E356010
Ikarus	Trojan-Downloader.MSIL.Agent
Antiy-AVL	Trojan/Generic.ASMalwS.31E2931
Microsoft	Trojan:Win32/Ymacco.AA57
AhnLab-V3	Malware/Win32.RL_Generic.R366031
McAfee	GenericRXNT-UP!7E825E356010
Malwarebytes	Malware.AI.491600201
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.98 (RDM.MSIL:8zX5p45/a3fKZ9TS04vstQ)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.560100
Panda	Trj/GdSda.A

How to remove Malware.AI.491600201?

Malware.AI.491600201 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X