Malware.AI.83626676 removal guide

The Malware.AI.83626676 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.83626676 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.83626676?


File Info:
name: EFAB49AC08AA5DB038A3.mlw
path: /opt/CAPEv2/storage/binaries/10c3787bb882aa63168942e8f2170f3af58627ffeff38638a22a026aa3f41692
crc32: 1BFF3999
md5: efab49ac08aa5db038a3b8e44c5c0de7
sha1: a5cf6a3286b23f316c7997bb376543e7889fd308
sha256: 10c3787bb882aa63168942e8f2170f3af58627ffeff38638a22a026aa3f41692
sha512: 6e2882ffa3b3f2c12d0a374b5fe372941d732427124ce08822bb8887d215b0c33dc3dfbda748ce607ba62a444633c4ace14cea55fd0026b1a7666e30bdab31fd
ssdeep: 24576:x8LA3I+pwupJavtwx1vsVeZ2SoqKUG2+6iO93969F8or8Owwwwwwwwwwwwwm:x8s4+GHvtw37Z2SoqKUr3gF78I
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11A8502C2BA05E80ADD2849304E72CD54663B7C3F6DA4655BBACD774DBB724238831376
sha3_384: 2155af44c812703dfc5df7a7b91a4d7d43da0165bd8f90b2372a9d1689a5d8f027bdf33353725a06a6fc9d57ffb3f46a
ep_bytes: 6a746840314000e8dd02000033db895d
timestamp: 2007-09-21 20:00:53

Version Info:
Comments: 医院管理信息系统
CompanyName: 上饶市睿易科技有限公司
FileDescription: 医院信息管理系统
LegalCopyright: 版权所有 盗版必究
LegalTrademarks: 健硕
ProductName: 医院信息管理系统软件
FileVersion: 2011.7.99.0
ProductVersion: 2011.7.99.0
InternalName: 健硕医院信息管理系统
OriginalFilename: 健硕医院信息管理系统.exe
Translation: 0x0000 0x04b0

Malware.AI.83626676 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.70123191
Skyhigh	BehavesLike.Win32.Backdoor.tc
McAfee	GenericRXSY-BQ!EFAB49AC08AA
Malwarebytes	Malware.AI.83626676
Sangfor	Trojan.Win32.Agent.V3q4
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	Trojan.Generic.D42DFEB7
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKD.70123191
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.70123191 (B)
VIPRE	Trojan.GenericKD.70123191
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.efab49ac08aa5db0
SentinelOne	Static AI – Malicious PE
Varist	W32/S-4d22c304!Eldorado
MAX	malware (ai score=84)
Kingsoft	malware.kb.a.787
GData	Trojan.GenericKD.70123191
Google	Detected
AhnLab-V3	Malware/Win.BQ.R619108
ALYac	Trojan.GenericKD.70123191
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06JS23
MaxSecure	Trojan.Malware.220009164.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Cybereason	malicious.286b23
DeepInstinct	MALICIOUS

How to remove Malware.AI.83626676?

Malware.AI.83626676 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X