Malware

About “Malware.AI.922010906” infection

Malware Removal

The Malware.AI.922010906 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.922010906 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Malware.AI.922010906?


File Info:

crc32: 037DE54E
md5: 3218010f0b4b554e8b3ffa75f783b606
name: 3218010F0B4B554E8B3FFA75F783B606.mlw
sha1: a051fdca7257a0d6b0a2f96d81c77429761ac258
sha256: a8c2fdf5d0996677c37923993de6e67315f7bf76a165e33dffc496a3a230299d
sha512: 8da0a832f5b320ee90a5fc7061f5ea69ce8bc21e0102b99b208ae5f1f0d9ccc372b12c5cc74ecdc0d7448177e95a7367dc869767ec340b0e74c113299098e56b
ssdeep: 12288:KrkHK7noUBuBWrBvOtlWzkocXU7T86IL/DNsvcoDu8hno4H61CKz6vayP1uyYdq:KrkHs50YrBvArbgteZMo4+mvayPOdqB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 1.15
CompanyName: IDRIX
LegalTrademarks: VeraCrypt
ProductName: VeraCrypt
ProductVersion: 1.15
FileDescription: VeraCrypt
OriginalFilename: VeraCrypt.exe
Translation: 0x0409 0x04b0

Malware.AI.922010906 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Turboinstall.4
McAfeeGenericRXAA-FA!3218010F0B4B
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
Cybereasonmalicious.a7257a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.FDDP
APEXMalicious
CynetMalicious (score: 100)
AlibabaTrojan:Win32/Kryptik.507301ab
SophosMal/Generic-S
ComodoMalware@#g1089rch9wrz
BitDefenderThetaGen:NN.ZexaF.34170.Z90@aCX2waoi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Infected.tm
FireEyeGeneric.mg.3218010f0b4b554e
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwFH.33BB916
MicrosoftTrojan:Win32/Wacatac.B!ml
MalwarebytesMalware.AI.922010906
PandaTrj/CI.A
RisingMalware.Obscure/Heur!1.A89E (CLASSIC)
IkarusTrojan.Win32.Genkryptik
FortinetW32/Generic.AP.1397A!tr
Paloaltogeneric.ml

How to remove Malware.AI.922010906?

Malware.AI.922010906 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment