Malware

Malware.AI.756036607 removal

Malware Removal

The Malware.AI.756036607 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.756036607 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Enumerates the modules from a process (may be used to locate base addresses in process injection)
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.756036607?


File Info:

name: C6CB0D2439F1893FA2B1.mlw
path: /opt/CAPEv2/storage/binaries/22f2417bc4f1a127b3d9e786baf77c00dbe349caeebe0428edb4ba82907b47a4
crc32: 7FEE92F5
md5: c6cb0d2439f1893fa2b18ecd9e919948
sha1: 79f70e06059423ac1eb5fa5a85b57a0ba2e93758
sha256: 22f2417bc4f1a127b3d9e786baf77c00dbe349caeebe0428edb4ba82907b47a4
sha512: fc58bfc79118351dc55b16360278ef896576280772ad9045d6d057224251cd3d5d8e72e901a9386ab20b7b1f8a5ae096cfb13a649a13ab72777c4ea67ba9ca64
ssdeep: 768:NsQLwrADOUE0X0+0mH1V1NWgaeGk0DPyvZtIKt25zKHXgTrb/6jwq6Y7G:NsQLgR+0K1V1NW9siSjwqa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8D3F0276A686CEFD1D41130FF20797B8EB8BD1158A7DC946985BC74CCA89CB3E20742
sha3_384: ade513602c4c3264518ad271d560270f7f731d003001d330ee59bb78cbb4435d65e5a631636e6978d7109d8d7d510c9e
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-08-04 17:24:41

Version Info:

Translation: 0x0000 0x04b0
FileDescription: ConsoleApplication1
FileVersion: 1.0.0.0
InternalName: ConsoleApplication1.exe
LegalCopyright: Copyright © 2017
OriginalFilename: ConsoleApplication1.exe
ProductName: ConsoleApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.756036607 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.517
MicroWorld-eScanGen:Variant.Tedy.4527
McAfeeArtemis!C6CB0D2439F1
CylanceUnsafe
SangforTrojan.Win32.Generic.ky
K7AntiVirusTrojan ( 0050eaed1 )
AlibabaTrojan:MSIL/Injector.9205cd2f
K7GWTrojan ( 0050eaed1 )
Cybereasonmalicious.605942
BitDefenderThetaGen:NN.ZemsilF.34294.im0@amd4yob
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.RSG
TrendMicro-HouseCallTROJ_GEN.R002C0WKN21
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Tedy.4527
NANO-AntivirusTrojan.Win32.MSILPerseus.fgirrt
AvastWin32:Trojan-gen
TencentWin32.Trojan.Generic.Tafb
Ad-AwareGen:Variant.Tedy.4527
SophosMal/Generic-S
ComodoMalware@#3pe59zt9e327z
TrendMicroTROJ_GEN.R002C0WKN21
McAfee-GW-EditionArtemis
SentinelOneStatic AI – Malicious PE
FireEyeGeneric.mg.c6cb0d2439f1893f
EmsisoftGen:Variant.Tedy.4527 (B)
IkarusTrojan.MSIL.Crypt
GDataGen:Variant.Tedy.4527
JiangminTrojan.Generic.cnnbu
eGambitUnsafe.AI_Score_99%
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Generic.ASMalwS.2756EBD
GridinsoftRansom.Win32.Occamy.sa
MicrosoftTrojan:Win32/Occamy.C22
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Cloxer.R284918
VBA32TScope.Trojan.MSIL
ALYacGen:Variant.Tedy.4527
MalwarebytesMalware.AI.756036607
APEXMalicious
YandexTrojan.Agent!KPluPv2f5cQ
MAXmalware (ai score=86)
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.CMQ!tr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.756036607?

Malware.AI.756036607 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment