Should I remove “Malware.AI.2309250130”?

The Malware.AI.2309250130 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2309250130 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2309250130?


File Info:
name: A841925DC645032D4E8B.mlw
path: /opt/CAPEv2/storage/binaries/86eaaf673c45c47274ba75dfb0553c44d925cd3412ec4c63c06620925cf8c5a1
crc32: 97534465
md5: a841925dc645032d4e8b19112bb924bc
sha1: a6c04d79d2719a5001f161e3a515ba468aeea99c
sha256: 86eaaf673c45c47274ba75dfb0553c44d925cd3412ec4c63c06620925cf8c5a1
sha512: caff0c3ba6ab6b833e166f4f51528e28a7dad02e001835bb392b7a6f149a80f9e3a1ef75330678337eb9304f2679db6e031e93079b3ff08cb3a3c20f71be1675
ssdeep: 12288:6XVa5N7wKO/3zfpvwsQS5TAS0spcPUEtAdd:AXAsaftAdd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T127B48C2418F91FAED52085B50FF0942BA7F08466A41DDEA5DE02DE5743CAC98BF9383D
sha3_384: f4573582a9653d6145c6066c18561cea449b940907d9ea92574906e8bd1e1e8e0b7f3944703a8cec50bab15607aa6eea
ep_bytes: 60be002050008dbe00f0efff5783cdff
timestamp: 2012-06-13 11:50:35

Version Info:
Translation: 0x0409 0x04b0
Comments: Colti bava rotaie
CompanyName: nomini vibri
FileDescription: Op pagano hs viso
LegalCopyright: hv sudori cofano 1990
LegalTrademarks: aduli ronda
ProductName: pz
FileVersion: 8.08.0004
ProductVersion: 8.08.0004
InternalName: vermi
OriginalFilename: vermi.exe

Malware.AI.2309250130 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.GenericML.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Trojan.Heur.Fm0@!tL1bCaG
FireEye	Generic.mg.a841925dc645032d
McAfee	GenericRXAA-FA!A841925DC645
Cylance	Unsafe
VIPRE	Gen:Trojan.Heur.Fm0@!tL1bCaG
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	AI:Packer.A7FB1CF91C
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0WJ522
Paloalto	generic.ml
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
BitDefender	Gen:Trojan.Heur.Fm0@!tL1bCaG
Cynet	Malicious (score: 100)
Avast	Win32:Malware-gen
Ad-Aware	Gen:Trojan.Heur.Fm0@!tL1bCaG
TACHYON	Trojan/W32.Agent_Packed.512512.B
Emsisoft	Gen:Trojan.Heur.Fm0@!tL1bCaG (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	TROJ_GEN.R002C0WJ522
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
Avira	HEUR/AGEN.1251230
Antiy-AVL	Trojan/Generic.ASMalwS.82BA
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Trojan.Heur.Fm0@!tL1bCaG
AhnLab-V3	Trojan/Win.VBKrypt.R512688
ALYac	Gen:Trojan.Heur.Fm0@!tL1bCaG
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.2309250130
Rising	Trojan.Generic!8.C3 (CLOUD)
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
Cybereason	malicious.dc6450

How to remove Malware.AI.2309250130?

Malware.AI.2309250130 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X