Malware

Malware.AI.906428999 removal

Malware Removal

The Malware.AI.906428999 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.906428999 virus can do?

  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Arabic (Egypt)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)

How to determine Malware.AI.906428999?


File Info:

name: 385E8305D35494D6E9C0.mlw
path: /opt/CAPEv2/storage/binaries/00cedabdd2e7860c0042ecf28899932871a1012ed79b66dabc7dd62ebf051928
crc32: A141FFB2
md5: 385e8305d35494d6e9c0bf40162344a0
sha1: d9499b080ad39a6d66af9f5a0ae09f313ad1a45b
sha256: 00cedabdd2e7860c0042ecf28899932871a1012ed79b66dabc7dd62ebf051928
sha512: 8a38073d9afb39d9888662870eaa810d4a16a0f1e18457dd5bb00d0ccfc5a3de950c7e571604f2e4a3fa2ef764708d1525e33f9de7d6fef623b547b617212a00
ssdeep: 24576:7T5ezpUC71caZhAa1PkGypnIm6/WEDxT4ani5Ue60UXkdi/+sptsX:7TAz+CGlaSGyj6/hxT4agUDkyFO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B94523247A8665A5F2A39E324FD3A0F487453DD1FAEC91EE633B7A9E03B131147161C8
sha3_384: db85fc015631999dc340da433124024f281c2fe27abe0eb34e10bb3b8e1d76dbf6099cae25a8314a6c7ae5de6ed03ac3
ep_bytes: 6866000000680000000068eca24000e8
timestamp: 2022-09-02 00:23:30

Version Info:

Comments: www.remouse.com
FileDescription: ReMouse Editor Standard
FileVersion: 5.4
LegalCopyright: AutomaticSolution Software
ProductName: ReMouse Editor Standard
ProductVersion: 5.4
Translation: 0x0409 0x04b0

Malware.AI.906428999 also known as:

tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Application.Graftor.390951
FireEyeGeneric.mg.385e8305d35494d6
MalwarebytesMalware.AI.906428999
VIPREGen:Variant.Application.Graftor.390951
K7AntiVirusTrojan ( 0053ed2b1 )
K7GWTrojan ( 0053ed2b1 )
Cybereasonmalicious.5d3549
BaiduWin32.Trojan-PSW.Agent.i
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Injector.EAZJ
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan-Downloader.Win32.AutoIt.gen
BitDefenderGen:Variant.Application.Graftor.390951
NANO-AntivirusTrojan.Win32.Inject.drewls
Ad-AwareGen:Variant.Application.Graftor.390951
EmsisoftGen:Variant.Application.Graftor.390951 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1205214
MAXmalware (ai score=73)
ArcabitTrojan.Application.Graftor.D5F727
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacGen:Variant.Application.Graftor.390951
VBA32BScope.Trojan.Crampes
CylanceUnsafe
RisingTrojan.Generic@AI.83 (RDML:Ag9nq8TD5MGZmhiQA3otKQ)
YandexTrojan.GenAsa!6DqdwzuLcG8

How to remove Malware.AI.906428999?

Malware.AI.906428999 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment