Malware

About “Malware.AI.968777843” infection

Malware Removal

The Malware.AI.968777843 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.968777843 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Attempts to identify installed AV products by installation directory
  • Anomalous binary characteristics

How to determine Malware.AI.968777843?


File Info:

crc32: D080E9D7
md5: afcd1d78f5d6541f2b0904d20428578e
name: AFCD1D78F5D6541F2B0904D20428578E.mlw
sha1: 85a097ade3c94160b54dd8b79ad571818eecedca
sha256: 049a2724bcfdbeed9e58e3edf0af8e32803c9c1816541a2f95377bc9646c66c6
sha512: e83fdc2eafdcd92d0a66ff3748675a1f3b74b06db297f7333f2df847d6568bb4f71ad8726fb874a6ec14a32aa3f444bd07037f01ea9093dd81badcd12a261f64
ssdeep: 24576:XW7GF7X+ihfrqUPqrVBwaB6kj3O56tBau:XUsR+HjwaBJSfu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 2013 Steganos Software GmbH
InternalName: TraceDestructor.exe
FileVersion: 17.0.2.11443
CompanyName: Steganos Software GmbH
LegalTrademarks: Steganos Safe 17 is a trademark of Steganos Software GmbH
Comments: Steganos Safe 17
ProductName: Steganos Safe 17
ProductVersion: 17.0.2.11443
FileDescription: Steganos TraceDestructor
OriginalFilename: TraceDestructor.exe
Translation: 0x0409 0x04e4

Malware.AI.968777843 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusBackdoor ( 005328fd1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.4691
MicroWorld-eScanTrojan.Ransom.Cerber.1
ALYacTrojan.Ransom.Cerber.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWBackdoor ( 005328fd1 )
Cybereasonmalicious.8f5d65
BaiduWin32.Trojan.Kryptik.anp
SymantecPacked.Generic.459
ESET-NOD32a variant of Win32/Kryptik.EVBN
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Vucha.dc
BitDefenderTrojan.Ransom.Cerber.1
NANO-AntivirusTrojan.Win32.Vucha.evsmsg
TencentWin32.Trojan.Generic.Lrsn
Ad-AwareTrojan.Ransom.Cerber.1
SophosML/PE-A + Mal/Cerber-B
ComodoMalCrypt.Indus!@1qrzi1
BitDefenderThetaAI:Packer.5C575D1020
TrendMicroRansom_HPCERBER.SMALY5A
McAfee-GW-EditionBehavesLike.Win32.Ransomware.tm
FireEyeGeneric.mg.afcd1d78f5d6541f
EmsisoftTrojan.Ransom.Cerber.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Vucha.ahf
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Win32.Vucha
MicrosoftRansom:Win32/Avaddon.P!MSR
ArcabitTrojan.Ransom.Cerber.1
ZoneAlarmHEUR:Trojan.Win32.Vucha.dc
GDataTrojan.Ransom.Cerber.1
AhnLab-V3Win-Trojan/Lukitus2.Exp
Acronissuspicious
McAfeeArtemis!AFCD1D78F5D6
MAXmalware (ai score=100)
VBA32BScope.TrojanPSW.IBank.1412
MalwarebytesMalware.AI.968777843
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_HPCERBER.SMALY5A
RisingTrojan.Kryptik!1.AE9C (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/Dridex.DD!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.968777843?

Malware.AI.968777843 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment