Malware

Malware.AI.745639870 removal

Malware Removal

The Malware.AI.745639870 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.745639870 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • At least one process apparently crashed during execution
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.745639870?


File Info:

name: D2F0E1B4CD6299B94610.mlw
path: /opt/CAPEv2/storage/binaries/ed6ff7f4bf6e77389a9db3473259fb301ba94e0bac1e290d1fc6de78a8148aa0
crc32: DF33647A
md5: d2f0e1b4cd6299b94610c160518900a4
sha1: fc5fdebb0bf5b633f0bdcace21801b9273ebc60f
sha256: ed6ff7f4bf6e77389a9db3473259fb301ba94e0bac1e290d1fc6de78a8148aa0
sha512: f1444a779bdcf65064dd651f8f536149789fdc8d3642d1cf5368af8a40ce0c119eb2aab4eb7f3d542bb197e3489a333073ccc46c48e96fe23f9b3f5a037c40e8
ssdeep: 12288:wdne/ALNomH/r3/CD5PbZIW6sSIVHQW3qRBv3fRBHcnnaU4XDV/:wFe/ArHD3OIW6sEW3iZ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14315BF01B142C1B2D5610070B6ACF7EB053E7A38272B4DC7B3F41B695AA41E26EF5BD6
sha3_384: d1c0d5d8cf1092d448d17399b4cdb053f7e05c6343db0e03d812b0763243d6ddb34107dff27836a2881a9a1b0689e2eb
ep_bytes: e880040000e974feffff558bec81ec24
timestamp: 2021-09-09 14:55:18

Version Info:

0: [No Data]

Malware.AI.745639870 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Johnnie.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Johnnie.369284
FireEyeGeneric.mg.d2f0e1b4cd6299b9
McAfeeArtemis!D2F0E1B4CD62
MalwarebytesMalware.AI.745639870
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojan:Win32/Khalesi.738bf63c
K7GWRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZexaF.34062.3uW@amcpuUak
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyHEUR:Trojan.Win32.Khalesi.gen
BitDefenderGen:Variant.Johnnie.369284
Ad-AwareGen:Variant.Johnnie.369284
EmsisoftGen:Variant.Johnnie.369284 (B)
TrendMicroTROJ_GEN.R002C0RKT21
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
SophosMal/Behav-010
GDataGen:Variant.Johnnie.369284
MaxSecureTrojan.Malware.11913586.susgen
AviraTR/Khalesi.wxqmw
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Johnnie.D5A284
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4783991
ALYacGen:Variant.Johnnie.369284
MAXmalware (ai score=80)
TrendMicro-HouseCallTROJ_GEN.R002C0RKT21
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/PossibleThreat
PandaTrj/GdSda.A

How to remove Malware.AI.745639870?

Malware.AI.745639870 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment