Malware.AI.491699402 removal tips

The Malware.AI.491699402 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.

6-day free trial available.

What Malware.AI.491699402 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the Heracles malware family
Binary compilation timestomping detected

How to determine Malware.AI.491699402?


File Info:
name: 1D569C3E9F88C311FBFA.mlw
path: /opt/CAPEv2/storage/binaries/b7195eb59e0b3e5d5e2fb2c38d0335998bf66e5bf92e24b9bb5a705fcbc1cd19
crc32: 7E696562
md5: 1d569c3e9f88c311fbfa5e0ab68c57ed
sha1: ada59da209cc6bd3bb24ef07449a2c3b8e4b07e4
sha256: b7195eb59e0b3e5d5e2fb2c38d0335998bf66e5bf92e24b9bb5a705fcbc1cd19
sha512: 546c3d18dfdf06024e056bb1b5872c3a3b2e2f9c0ca3d037dab00f16c6c82fe16c37062e3803679e3d973634bbf49d84d45bb7a69548cc5b9a0f9ad4345e777d
ssdeep: 1536:aG4eb6TDbfCAoQ1WvQmnm+pFO/BBb04/glVFDA0QYuJP:au6LCk1WYwNp0//o4oHFH5g
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5141D94E3D4F8F5C51A063FC70CFA4015AC1C316AA3917AA68E7F6A97313C1EDCA925
sha3_384: 39ed09ddb9a1ecde239b8b69f0324cc199baa3782d5aa4e621096c6aee0f75261e3df7164f32f00bcf770f672d03c573
ep_bytes: ff250020400000000000000000000000
timestamp: 2074-04-20 11:20:39

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: BuffLike
FileVersion: 1.0.0.0
InternalName: Avast Free Antivirus.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Avast Free Antivirus.exe
ProductName: BuffLike
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.491699402 also known as:

ALYac	Gen:Variant.MSILHeracles.28653
Malwarebytes	Malware.AI.491699402
BitDefender	Gen:Variant.MSILHeracles.28653
Cybereason	malicious.209cc6
ESET-NOD32	a variant of MSIL/PSW.Agent.SHO
APEX	Malicious
ClamAV	Win.Malware.Betload-9843121-0
MicroWorld-eScan	Gen:Variant.MSILHeracles.28653
Ad-Aware	Gen:Variant.MSILHeracles.28653
FireEye	Generic.mg.1d569c3e9f88c311
Emsisoft	Gen:Variant.MSILHeracles.28653 (B)
GData	Gen:Variant.MSILHeracles.28653
MAX	malware (ai score=89)
Arcabit	Trojan.MSILHeracles.D6FED
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Malware/Win.Generic.C4801893
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
BitDefenderTheta	Gen:NN.ZemsilF.34084.lm0@aeQ9r4k
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.491699402?

Malware.AI.491699402 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X