Malware

Malware.AI.1168222287 removal guide

Malware Removal

The Malware.AI.1168222287 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1168222287 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1168222287?


File Info:

name: 56B267F4608956B22767.mlw
path: /opt/CAPEv2/storage/binaries/00b93bfd3ebccb9910412d16d6bf4bf09e148d35a81f36cfe7ce6ca4897e9288
crc32: 5BBCE296
md5: 56b267f4608956b22767fe6f7109a589
sha1: bfbf2ba2ffb094d027736224c6d84a4885dd4ab2
sha256: 00b93bfd3ebccb9910412d16d6bf4bf09e148d35a81f36cfe7ce6ca4897e9288
sha512: c169469baf2f39d1da74cd54b2242478f75d1d0399fdf1dac210faa9dbfd55449df4b1d0a6e29aee85dd1f2bbde7f2a678cdf4b8a32201ebaef9c8ba53e014de
ssdeep: 3072:phUrpJlLXWcXqUAXmzKL3UMAFjfj0gYObDKzrkT8mWFI3AwZMSzwSb5XbRZzFPkk:pyF7ImzKLjsXnvKzwqKwaF9HMzTy1P
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T148649D117790C472D16A29324819C2B4AB7BB031DFE589C77BD41B3E9F702D2B93A71A
sha3_384: f361852bd9ab5947182d297e81b2ec9e4af04a4f2a7a01d111ccc14c5f11f05956dbe3b3858e4b378689e4b3a4aa4588
ep_bytes: 8bec609ce939b00200ff8bff558bec8b
timestamp: 2011-01-17 12:54:43

Version Info:

FileVersion: 1, 0, 0, 2
LegalCopyright: Copyright (C) 2010
ProductVersion: 1, 0, 0, 2
Translation: 0x0409 0x04b0

Malware.AI.1168222287 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.HangOver.4!c
MicroWorld-eScanDeepScan:Generic.ShellCode.Marte.J.6D6535EA
ClamAVWin.Dropper.Memery-9979246-0
FireEyeGeneric.mg.56b267f4608956b2
ALYacDeepScan:Generic.ShellCode.Marte.J.6D6535EA
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusSpyware ( 0020507a1 )
AlibabaTrojanSpy:Win32/HangOver.419b9f7d
K7GWSpyware ( 0020507a1 )
Cybereasonmalicious.460895
VirITTrojan.Win32.Siggen2.BDJS
CyrenW32/ABRisk.KKIE-1645
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Spy.Agent.NUS
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.HangOver.gen
BitDefenderDeepScan:Generic.ShellCode.Marte.J.6D6535EA
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:MalOb-FE [Cryp]
TencentWin32.Trojan.Hangover.Kzfl
Ad-AwareDeepScan:Generic.ShellCode.Marte.J.6D6535EA
EmsisoftDeepScan:Generic.ShellCode.Marte.J.6D6535EA (B)
DrWebTrojan.Siggen18.27706
VIPREDeepScan:Generic.ShellCode.Marte.J.6D6535EA
TrendMicroTROJ_GEN.R002C0PKN22
McAfee-GW-EditionBehavesLike.Win32.NetLoader.fh
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataDeepScan:Generic.ShellCode.Marte.J.6D6535EA
JiangminTrojan.HangOver.y
AviraHEUR/AGEN.1242849
Antiy-AVLTrojan[Spy]/Win32.Agent
ArcabitDeepScan:Generic.ShellCode.Marte.J.6D6535EA
ViRobotTrojan.Win32.A.Agent.245248.B
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Malware/Win.Generic.C5312369
McAfeeGeneric Obfuscated.g
MAXmalware (ai score=83)
VBA32Heur.Trojan.Hlux
MalwarebytesMalware.AI.1168222287
TrendMicro-HouseCallTROJ_GEN.R002C0PKN22
RisingBackdoor.Hupigon!8.B57 (TFE:3:9ZR3ES2hAvB)
YandexTrojan.GenAsa!o0gODfbw894
IkarusTrojan-Spy.Win32.Agent
FortinetW32/GenKryptik.GCTV!tr
BitDefenderThetaAI:Packer.7FABD1351F
AVGWin32:MalOb-FE [Cryp]

How to remove Malware.AI.1168222287?

Malware.AI.1168222287 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment