About “Malware.AI.2309959188” infection

The Malware.AI.2309959188 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2309959188 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.2309959188?


File Info:
name: 6C9DB059F70596B40D31.mlw
path: /opt/CAPEv2/storage/binaries/a56e483446f599fc897204e4db2eb9013d33392f8e5ab6fe391a9088f8f1ccbe
crc32: 3CC10037
md5: 6c9db059f70596b40d31ec541550c582
sha1: 2431cebcf5d9dbb4592d72566edb5516a2516c9e
sha256: a56e483446f599fc897204e4db2eb9013d33392f8e5ab6fe391a9088f8f1ccbe
sha512: ae2b0a9015f12cb2bf4d4fcd3af62a4b713028bfc48da20e30e55e0330d60ffd84e9158d5cef90104d3e16ed15e4c744381de14a587e0d5ec0f917d826bdd53d
ssdeep: 24576:Dk1WP/oXSaG3LfUBvSI8LUlFl5FpuBsbSAOidYrovp4Tp9aQCoGsXHRL:Dk1NrG3LfUvcY/uBMO+YrovpU/9L
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CAE5C42169208875CC1DCE701516A9B8F1167D6FFDBE390B2E927EAEFBF32D11911122
sha3_384: 86dc7ba1ee2b58fb8736f33d99932a9310c8360b9851c7823e90e0d75c9813081c1c1a8370ab893731c984a37d8d2b0a
ep_bytes: e8c02f0000e9000000006a1468881741
timestamp: 2018-03-15 13:16:05

Version Info:
Comments: https://www.autoitscript.com/site/autoit/
CompanyName: AutoIt Team
FileDescription: AutoIt3Help viewer
FileVersion: 1.0.0.8
InternalName: AutoIt3Help
LegalCopyright: ©2005-2015 J-Paul Mesnage & AutoIt Team
OriginalFilename: AutoIt3Help.exe
ProductName: AutoIt3Help
ProductVersion: 1.0.0.8
Translation: 0x0809 0x04b0

Malware.AI.2309959188 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cyren	W32/Agent.CPS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Malware.Bulz-9871427-0
Kaspersky	HEUR:Worm.Win32.Pajetbin.gen
Avast	Win32:Malware-gen
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wt
Ikarus	Trojan-Downloader.Win32.Harnig
Jiangmin	Packed.Krap.gvux
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!6C9DB059F705
Malwarebytes	Malware.AI.2309959188
TrendMicro-HouseCall	TROJ_GEN.R03BH07LN21
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.C5FC!tr
AVG	Win32:Malware-gen

How to remove Malware.AI.2309959188?

Malware.AI.2309959188 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X