About “Malware.AI.160874702” infection

The Malware.AI.160874702 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.160874702 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.160874702?


File Info:
name: 093E84096DE1A2349C85.mlw
path: /opt/CAPEv2/storage/binaries/dc9456bfea2b21305b7b4a0c3f49b35e599989e5274b136c4454b3babcea2678
crc32: A50D178D
md5: 093e84096de1a2349c859e9b84d854f4
sha1: 6d9171ffcb79bd0f14ff83dc2a30c3f1af047ac5
sha256: dc9456bfea2b21305b7b4a0c3f49b35e599989e5274b136c4454b3babcea2678
sha512: 79649dc06a10a2915fbf9d6a78a76ce3fbe106f15b3b6c619775964b0958c8b126f5e1efe9b6f904718146b35a9aa3983538e2feb27e25565874055b073df152
ssdeep: 3072:S6vDR2KrO2nyhOjh0aylE5gVKVWaYBRTykX/lsfu6G3M3tHsE2:Sck2nyhPaMTyKlAG3aM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13D441943B3EB94ADD9B372B51EEBC366D733B9188723811F32952A6F9D215005E22371
sha3_384: c9f007d6121f19ba84d9db71ee1d7067a34ecb90ad5de5f1c0c057c2d9470c5eb245c8f7c8ca89937e5942906bc02bca
ep_bytes: 60be000047008dbe0010f9ff57eb0b90
timestamp: 2010-04-16 07:47:33

Version Info:
FileVersion: 4.0.5.1101
Comments: 英特尔(R) AMT主动管理技术用户通知服务进程。
FileDescription: User Notification Service
LegalCopyright: Copyright ? 2006-2008, Intel Corporation. All rights reserved.
产品版本: 01
产品名称:  Active Management Technology User Notification Service
公司: l Corporation
内部名称: 文件名
源文件名: D
Translation: 0x0409 0x04b0

Malware.AI.160874702 also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Zusy.425540
ALYac	Gen:Variant.Zusy.425540
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
CrowdStrike	win/malicious_confidence_70% (D)
tehtris	Generic.Malware
APEX	Malicious
BitDefender	Gen:Variant.Zusy.425540
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Zusy.425540
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
FireEye	Generic.mg.093e84096de1a234
Emsisoft	Gen:Variant.Zusy.425540 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.425540
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R495668
McAfee	GenericRXAA-FA!093E84096DE1
Malwarebytes	Malware.AI.160874702
Ikarus	Trojan-Downloader.Win32.AutoIt
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
Cybereason	malicious.fcb79b

How to remove Malware.AI.160874702?

Malware.AI.160874702 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X