About “Malware.AI.2046850137” infection

The Malware.AI.2046850137 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2046850137 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.2046850137?


File Info:
name: F0369906F086248600F5.mlw
path: /opt/CAPEv2/storage/binaries/17a69be88970a3c58d2d40ce90b587865e6e3955dedb3c96efcb6b66c3a1cfac
crc32: 5B030622
md5: f0369906f086248600f5e2d5c4994cea
sha1: a65adb4e370482e14a1e4b56055dda2f31848355
sha256: 17a69be88970a3c58d2d40ce90b587865e6e3955dedb3c96efcb6b66c3a1cfac
sha512: c14a91c6cf23a9e8e5cf6e0f8e3b5462dc17a727cfd2d6aaa4ee795035695e7588b3da7e0839dc2df08f531d205018161271a9ce092af0631f19fea241fc8e65
ssdeep: 24576:MxGRIr3oO0gR0nwpnPw3VDlIQ865M+RysUK:xCr3T06NnCIQ865pRyhK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF15D023B3D28472E0611A3CCC66E154AE2BBD611EF5655E3EF8CE4C4E7A6815C39393
sha3_384: b4444062b9256cb30646bacb6128b7a4c5f84939b55c06696d77e1a7b35f1e957de86264969231be6dad6bf25d0819da
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2014-07-09 07:58:13

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: 飞翔日历                                                        
FileDescription: 飞翔日历专业日历应用                                                  
FileVersion: 2015.0827.1646.57   
LegalCopyright: Copyright © 2012-2015 飞翔日历, Inc.                                                                    
ProductName: 飞翔日历                                                        
ProductVersion: 4.0                                               
Translation: 0x0000 0x04b0

Malware.AI.2046850137 also known as:

Bkav	W32.AIDetectMalware
ClamAV	Win.Trojan.Trojanx-9992287-0
FireEye	Generic.mg.f0369906f0862486
Skyhigh	MultiDropper-JD.b
Cylance	unsafe
Cybereason	malicious.e37048
Elastic	malicious (moderate confidence)
APEX	Malicious
Sophos	Generic ML PUA (PUA)
Zillya	Trojan.Agent.Win32.1302276
Ikarus	Trojan.Win32.Genome
Google	Detected
Antiy-AVL	Trojan/Win32.BTSGeneric
Xcitium	Malware@#2wwsd2pbxh3yt
Microsoft	Trojan:Win32/Zpevdo.B
ViRobot	Trojan.Win.Z.Agent.945992
Varist	W32/Trojan.PGQD-7356
AhnLab-V3	Malware/Gen.Generic.C2923900
McAfee	Artemis!F0369906F086
Malwarebytes	Malware.AI.2046850137
TrendMicro-HouseCall	TROJ_GEN.R002H06EE23
Yandex	Trojan.Rogue!ymZC6B5neIo
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.8823615.susgen
Fortinet	W32/Multidr.JD!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (W)

How to remove Malware.AI.2046850137?

Malware.AI.2046850137 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X