Should I remove “Malware.AI.941149911”?

The Malware.AI.941149911 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.941149911 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Presents an Authenticode digital signature
• Enumerates running processes
• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• Executable file is packed/obfuscated with ASPack
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Checks the presence of disk drives in the registry, possibly for anti-virtualization
• Attempted to write directly to a physical drive

How to determine Malware.AI.941149911?

File Info:
name: B5A478A4524F8D8D9BBF.mlw
path: /opt/CAPEv2/storage/binaries/bba39ab31cf42378299e60f5a55f9a585fb85c90441e511596aa3e97a1a595f6
crc32: 2FDB92B6
md5: b5a478a4524f8d8d9bbf5c3cd627c444
sha1: 50162f738660581f4c6486ba568d5d8b3780562d
sha256: bba39ab31cf42378299e60f5a55f9a585fb85c90441e511596aa3e97a1a595f6
sha512: e5db552ff46ed476972a1968f735f5e36e050bcac2bbe6f95ab12e22f6ab72fcbcb207bf4609e346210eed89d8982eba625efcb6c15b37a2e605d952f2dd80d2
ssdeep: 98304:yjrmsj1evxOpnidmHn+/Kh8rk/8jEXQHuCRG/NBoCVhmA5w1UUvgDmN:yjKI1evxOpidmsOt/8jEESNBooUoDI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D36331B85140467CDCC2AF1DB93A9AE1BE29DD72767177F01202F93B7740E03ADAA94
sha3_384: 10031499e4437adb2483baeeadb48f964e3516aed2da549d80fa695d0aa97dafb4df8f6372286e0dd029cd1aec5689c7
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 2021-05-28 05:24:49

Version Info:
CompanyName: 跃兔网络
编译时间: 8日 13:24:21, 星期五, SVN_0.0.0.0
FileDescription: 神途登录器
FileVersion: 1, 0, 0, 891
InternalName: GameUp
LegalCopyright: Copyright (C) 2016
OriginalFilename: GameUp.exe
ProductName: 神途登录器
ProductVersion: 2021, 5, 28, 0.0.0.0
Translation: 0x0804 0x04b0

Malware.AI.941149911 also known as:

How to remove Malware.AI.941149911?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.