Malware.AI.768145635 removal tips

The Malware.AI.768145635 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.768145635 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

How to determine Malware.AI.768145635?


File Info:
crc32: A88E97D7
md5: b9859c130d01e015a80d76154325568a
name: B9859C130D01E015A80D76154325568A.mlw
sha1: ed3287fa58686173b33abb9275011db9746b555c
sha256: 23a312b36f2079f275610e90ebfb77b5fd7d3903866464f836f16f756aea6776
sha512: 6535b2dd0ac4c38e68d94e09e3878108efef2964e4a2ae8f63dd1fc32f3dba99cde68bc62505e91a6005bae86038b007aa0a025ebd7b7f4ac2b06a0eb9ea84da
ssdeep: 24576:w2cFjdGHWHot5m2tCIgwb7xiiCBONCvy+H6Os+hl3GuE:UdZHotw2tCIV7xiiCBTy+aSfy
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2008 ArcaBit
InternalName: putinhuy
FileVersion: 1.4.5.2
ProductVersion: 9.9.5.6
CompanyName: NAVITELxae
Translation: 0x0409 0x04b0

Malware.AI.768145635 also known as:

K7AntiVirus	Trojan ( 00540ed61 )
Lionic	Trojan.Win32.Regsup.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject3.11598
ALYac	Trojan.Ranapama.ABK
Cylance	Unsafe
Zillya	Downloader.Nymaim.Win32.5248
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanDownloader:Win32/Regsup.4909acfb
K7GW	Trojan ( 00540ed61 )
Cybereason	malicious.30d01e
Cyren	W32/Internet-Trojan-patched-bas
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Nymaim.BA
APEX	Malicious
Avast	Win32:Kryptik-PRG [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Regsup.badk
BitDefender	Trojan.Ranapama.ABK
NANO-Antivirus	Trojan.Win32.Regsup.fjgzfa
MicroWorld-eScan	Trojan.Ranapama.ABK
Tencent	Malware.Win32.Gencirc.10b12211
Ad-Aware	Trojan.Ranapama.ABK
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Regsup.NR@7wfx07
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Downloader.th
FireEye	Generic.mg.b9859c130d01e015
Emsisoft	Trojan.Ranapama.ABK (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Regsup.bac
Avira	HEUR/AGEN.1117673
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.2889747
Microsoft	PWS:Win32/Zbot!ml
GData	Trojan.Ranapama.ABK
TACHYON	Trojan/W64.Agent.1048576
AhnLab-V3	Trojan/Win32.Agent.R240800
Acronis	suspicious
McAfee	GenericRXGN-AD!B9859C130D01
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Skeeyah
Malwarebytes	Malware.AI.768145635
Panda	Trj/GdSda.A
Rising	Downloader.Nymaim!1.AA57 (CLASSIC)
Yandex	Trojan.Regsup!nzRoA26036c
Ikarus	Trojan-Downloader.Win32.Nymaim
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GMQK!tr
AVG	Win32:Kryptik-PRG [Trj]
Paloalto	generic.ml

How to remove Malware.AI.768145635?

Malware.AI.768145635 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X