Malware

Malware.AI.928511981 removal guide

Malware Removal

The Malware.AI.928511981 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.928511981 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine Malware.AI.928511981?


File Info:

name: 69271A1AB35E265F28A6.mlw
path: /opt/CAPEv2/storage/binaries/d8619791fa52f48373535ffda08d62c9747d3f63c1a11d6be1e30cce4189f793
crc32: EF816713
md5: 69271a1ab35e265f28a66060df620d9c
sha1: 2ec0d94d8c57f509f6fd4695f1e65c3397873752
sha256: d8619791fa52f48373535ffda08d62c9747d3f63c1a11d6be1e30cce4189f793
sha512: db827244c78f0e139f3f3e89268cb55c718ce0a9b8f943077dcb0db4f40d79021bb760fadc4acb58400ac48b614e9479a6dfb5a9ff8e606a8a08c8297cf43afe
ssdeep: 24576:4i9y4zZsNuV4hJf443SrwjNDqwJiPndxryeiGc:XTOgVCZS2N9MPdx2Gc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T111051212F4E008B7D495573848AABBA9662ABC3209349DE7E3097D4E7C345D239793CF
sha3_384: 14ad28d333d630dfc03b344598c839351bc97e65aeaff4ec0f8a15d9aaad1f79e7e985ffeed38d448fc7ddb7cefc2c13
ep_bytes: 6810174000e8f0ffffff000000000000
timestamp: 2009-02-09 09:07:17

Version Info:

Translation: 0x0409 0x04b0
Comments: Upgrades products to the next version.
CompanyName: Softlink Logistic Systems Pvt. Ltd.
FileDescription: Application Upgrader
ProductName: DeployPatch
FileVersion: 2.01.0114
ProductVersion: 2.01.0114
InternalName: DeployPatch
OriginalFilename: DeployPatch.exe

Malware.AI.928511981 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.45419
FireEyeGeneric.mg.69271a1ab35e265f
McAfeeGenericATG-FCNH!69271A1AB35E
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforSuspicious.Win32.Save.a
AlibabaTrojan:Win32/Generic.f13a9fb8
Cybereasonmalicious.d8c57f
BitDefenderThetaGen:NN.ZevbaF.34062.Ym3@aSXUyedi
CyrenW32/Dropper.DI.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0GL721
Paloaltogeneric.ml
ClamAVWin.Malware.Generickdz-6988694-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fragtor.45419
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10b9ae1b
Ad-AwareGen:Variant.Fragtor.45419
SophosGeneric ML PUA (PUA)
ComodoTrojWare.Win32.VBObfus.ITWR@5j9kjp
DrWebTrojan.Inject3.6111
ZillyaTrojan.Generic.Win32.264326
TrendMicroTROJ_GEN.R002C0GL721
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
SentinelOneStatic AI – Malicious PE
EmsisoftGen:Variant.Fragtor.45419 (B)
APEXMalicious
JiangminTrojan.Generic.bvwrs
AviraTR/Dropper.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Generic.ASMalwS.225A883
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Fragtor.45419
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win32.VB.R90531
Acronissuspicious
ALYacGen:Variant.Fragtor.45419
VBA32TScope.Trojan.VB
MalwarebytesMalware.AI.928511981
YandexTrojan.GenAsa!yrrakqeDgaY
IkarusTrojan.Dropper
eGambitUnsafe.AI_Score_75%
FortinetW32/VB.BHJF!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.928511981?

Malware.AI.928511981 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment