Malware

Malware.AI.491699402 removal tips

Malware Removal

The Malware.AI.491699402 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Malware.AI.491699402 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the Heracles malware family
  • Binary compilation timestomping detected

How to determine Malware.AI.491699402?


File Info:

name: 1D569C3E9F88C311FBFA.mlw
path: /opt/CAPEv2/storage/binaries/b7195eb59e0b3e5d5e2fb2c38d0335998bf66e5bf92e24b9bb5a705fcbc1cd19
crc32: 7E696562
md5: 1d569c3e9f88c311fbfa5e0ab68c57ed
sha1: ada59da209cc6bd3bb24ef07449a2c3b8e4b07e4
sha256: b7195eb59e0b3e5d5e2fb2c38d0335998bf66e5bf92e24b9bb5a705fcbc1cd19
sha512: 546c3d18dfdf06024e056bb1b5872c3a3b2e2f9c0ca3d037dab00f16c6c82fe16c37062e3803679e3d973634bbf49d84d45bb7a69548cc5b9a0f9ad4345e777d
ssdeep: 1536:aG4eb6TDbfCAoQ1WvQmnm+pFO/BBb04/glVFDA0QYuJP:au6LCk1WYwNp0//o4oHFH5g
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5141D94E3D4F8F5C51A063FC70CFA4015AC1C316AA3917AA68E7F6A97313C1EDCA925
sha3_384: 39ed09ddb9a1ecde239b8b69f0324cc199baa3782d5aa4e621096c6aee0f75261e3df7164f32f00bcf770f672d03c573
ep_bytes: ff250020400000000000000000000000
timestamp: 2074-04-20 11:20:39

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: BuffLike
FileVersion: 1.0.0.0
InternalName: Avast Free Antivirus.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: Avast Free Antivirus.exe
ProductName: BuffLike
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.491699402 also known as:

ALYacGen:Variant.MSILHeracles.28653
MalwarebytesMalware.AI.491699402
BitDefenderGen:Variant.MSILHeracles.28653
Cybereasonmalicious.209cc6
ESET-NOD32a variant of MSIL/PSW.Agent.SHO
APEXMalicious
ClamAVWin.Malware.Betload-9843121-0
MicroWorld-eScanGen:Variant.MSILHeracles.28653
Ad-AwareGen:Variant.MSILHeracles.28653
FireEyeGeneric.mg.1d569c3e9f88c311
EmsisoftGen:Variant.MSILHeracles.28653 (B)
GDataGen:Variant.MSILHeracles.28653
MAXmalware (ai score=89)
ArcabitTrojan.MSILHeracles.D6FED
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3Malware/Win.Generic.C4801893
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
BitDefenderThetaGen:NN.ZemsilF.34084.lm0@aeQ9r4k
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.491699402?

Malware.AI.491699402 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment