What is “Malware.AI.1097336268”?

The Malware.AI.1097336268 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1097336268 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1097336268?


File Info:
name: 3E66C3CD59E7971CEE8C.mlw
path: /opt/CAPEv2/storage/binaries/4e239754c486ad130d54f794451ac3a6655875478353cd7e0026a7b7823f8aa9
crc32: 50DA8D6D
md5: 3e66c3cd59e7971cee8c8c3543905d96
sha1: 70c83a91c04479938d20bd418d1af7f93a6953a8
sha256: 4e239754c486ad130d54f794451ac3a6655875478353cd7e0026a7b7823f8aa9
sha512: 38af9034776556b760dcd051108a95ecb691c0ca6f35886a1c708fe1af5ab5323f9a6e1a4306ec76412ff90ee05ea1da405018e808dd9eb37d5e4128ba11cc84
ssdeep: 6144:ECNK0N0lIvRkKUAUACI1RNEdRXCNK0N0lIvRkKUAUACI1RNEds:+0Ng0NN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1508471B52321A8CEF34B3C3E7445B587D0B6A5D133DBB27BFCC67C82E8A55A40166099
sha3_384: d9ac4bc1a716f1e5075353b911ce17e8db4aa34331f8ba11d1cc7bce64d42487519c616db8e5fe3897d7ad8696a15509
ep_bytes: 9fa47c9e93949b8c6c8a5fa75f8c4f8a
timestamp: 2014-04-29 18:27:40

Version Info:
0: [No Data]

Malware.AI.1097336268 also known as:

Lionic	Trojan.Win32.Convagent.4!c
McAfee	Artemis!3E66C3CD59E7
Malwarebytes	Malware.AI.1097336268
Zillya	Trojan.Zolk.Win32.9
Sangfor	Trojan.Win32.Agent.Vqf0
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Convagent.gen
Avast	Win32:Malware-gen
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.XPACK.Gen
TrendMicro	TROJ_GEN.R002C0PB823
McAfee-GW-Edition	BehavesLike.Win32.Generic.ft
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Wacatac
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0PB823
Rising	Trojan.Generic@AI.100 (RDML:paQ66+PM6uqvW1EnlJAcOA)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Shohdi.B!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.1097336268?

Malware.AI.1097336268 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X