Malware

Should I remove “Malware.AI.649600995”?

Malware Removal

The Malware.AI.649600995 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.649600995 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Malware.AI.649600995?


File Info:

crc32: E0141447
md5: 6487c94e5dcb65252bb13f408a9f7278
name: 6487C94E5DCB65252BB13F408A9F7278.mlw
sha1: 87ae7b02d5ea7aa9e46ea861361a4ef9b0010d56
sha256: 8eb57d7f5f23f65212a76afe6d972687b0d7069d21221ef338d9231753488e2c
sha512: 4c5e941b207f2267032b4219948a482f33c535eabd96b0f76d8de53ff88ba06ec16d3125c6b5a3d1e290747a1ffe1bf7ddf587686158f48836b525bfce8cdeb1
ssdeep: 6144:q+Gh5dRx2T8uhrhGarObeFhjcLbDpU1+e+gopq7SjLZYNomcptl:ia8mcaULXrhlLLGmb
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2000-2021 by LibreOffice contributors. All rights reserved.
InternalName: odbcconfig
FileVersion: 7.1.3.2
CompanyName: The Document Foundation
ProductName: LibreOffice
ProductVersion: 7.1.3.2
OriginalFilename: odbcconfig.exe
Translation: 0x0409 0x04e4

Malware.AI.649600995 also known as:

K7AntiVirusVirus ( 00535e4a1 )
LionicVirus.Win64.Expiro.n!c
Elasticmalicious (high confidence)
DrWebWin64.Expiro.132
CynetMalicious (score: 100)
ALYacWin64.Expiro.Gen.6
CylanceUnsafe
SangforVirus.Win64.Expiro.gen
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaVirus:Win64/Expiro.3ad6ca87
K7GWVirus ( 00535e4a1 )
Cybereasonmalicious.2d5ea7
CyrenW64/Expiro.AH.gen!Eldorado
SymantecTrojan.Gen.6
ESET-NOD32a variant of Win64/Expiro.CO
APEXMalicious
AvastFileRepMalware
ClamAVWin.Virus.Xpiro-9896258-1
KasperskyHEUR:Virus.Win64.Expiro.gen
BitDefenderWin64.Expiro.Gen.6
NANO-AntivirusVirus.Win64.Expiro.clnvwd
MicroWorld-eScanWin64.Expiro.Gen.6
TencentWin64.Virus.Expiro.Wogd
Ad-AwareWin64.Expiro.Gen.6
TrendMicroVirus.Win64.EXPIRO.MR
McAfee-GW-EditionBehavesLike.Win64.Virus.gc
FireEyeGeneric.mg.6487c94e5dcb6525
EmsisoftWin64.Expiro.Gen.6 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Bingoml.akq
AviraW64/Infector.Gen
Antiy-AVLTrojan/Generic.ASVirus.30B
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitWin64.Expiro.Gen.6
GDataWin64.Expiro.Gen.6
Acronissuspicious
MAXmalware (ai score=85)
MalwarebytesMalware.AI.649600995
PandaTrj/CI.A
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
IkarusVirus.Win64.Expiro
FortinetW64/Expiro.BS
AVGFileRepMalware

How to remove Malware.AI.649600995?

Malware.AI.649600995 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment