Malware.AI.2200643895 information

The Malware.AI.2200643895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2200643895 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2200643895?


File Info:
name: 3B28D9476FEA46647768.mlw
path: /opt/CAPEv2/storage/binaries/dd26b294c8c3bc3c96bf89c0982d272934bda9f99b0439ca987cf883a351648a
crc32: 79A55CE4
md5: 3b28d9476fea46647768cb36047054f0
sha1: ffca0ebd5dab84a1b8f7655e38c6f8688405c52d
sha256: dd26b294c8c3bc3c96bf89c0982d272934bda9f99b0439ca987cf883a351648a
sha512: 5209546ecfde350f50fe71fe30398e036b0b056f53befffa8e9d76ca94a4d1f16f817254e88eeb670cb860d8752635389cf2471c92e6ad282e50da13e171d8f1
ssdeep: 12288:A+9H+5zYvfqDM2ANx7HT65qsJTBW6s4//3B9oSEsOcW:A+U5E6DM2ANx7TJUTBW6s4X3msOD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T182157D09FF024872CB6B143188DBEABA4724BFE58C27D747789D7E4DACB7660591E240
sha3_384: cbcad0c3274a5d6392516acaab4a3877fd51e1f6e1d576fa37017660fe2dab74e7b598475f13b910856c74c61a7bd22e
ep_bytes: 60be15e05a008dbeeb2fe5ffc78740d4
timestamp: 2011-08-05 03:25:03

Version Info:
ProductName: Gps Loader
LegalTrademarks: 
FileDescription: 
InternalName: 
CompanyName: Honeywell
FileVersion: 1.0.0.0
LegalCopyright: Copyright Honeywell
OriginalFilename: setup.exe
Comments: 
ProductVersion: 1.0
: 
Translation: 0x0409 0x04b0

Malware.AI.2200643895 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.66776656
ALYac	Trojan.GenericKD.66776656
Malwarebytes	Malware.AI.2200643895
Sangfor	Trojan.Win32.Agent.Vbze
Cybereason	malicious.76fea4
Elastic	malicious (moderate confidence)
APEX	Malicious
BitDefender	Trojan.GenericKD.66776656
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.66776656 (B)
VIPRE	Trojan.GenericKD.66776656
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
Trapmine	suspicious.low.ml.score
FireEye	Trojan.GenericKD.66776656
GData	Trojan.GenericKD.66776656
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.Azden
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D3FAEE50
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R297672
McAfee	RDN/Generic.hra
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06DU23
Rising	Trojan.Generic@AI.75 (RDMK:cmRtazrgKWQkwgq5QPFA1GXNJKUG)
MaxSecure	Trojan.Malware.207193734.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.2200643895?

Malware.AI.2200643895 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X