Malware

Should I remove “Malware.AI.2612053294”?

Malware Removal

The Malware.AI.2612053294 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2612053294 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Malware.AI.2612053294?


File Info:

name: D6C5CD6C9272306A58EE.mlw
path: /opt/CAPEv2/storage/binaries/b38a4f4ffc606acc048261c9d2e7f359c75b31bbff47a7f16476627314475974
crc32: 24732E7E
md5: d6c5cd6c9272306a58ee1af8ebd0ea4d
sha1: a908f631991dff7dad2d0d62c36c9d65382568dc
sha256: b38a4f4ffc606acc048261c9d2e7f359c75b31bbff47a7f16476627314475974
sha512: f3e7be9bc01b4334d23238c0335196eb54b61b57dc5f019613cd326cf2ea6a016dfd52c774592ac7555a49566677e8fe33cba8acb67f01e882e7d24768a37a1d
ssdeep: 3072:A/nPyW9x/hK7MoXgBHyjzJkjZHKDpJ5Vumjh6ec1Uu/xUyMnkwIxSEEZXZwoDU:A/6l7MoXmypAZGJ/d6ZHxjMnR6iZyM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14114E1512E04CA70CAC997F854B6560017381376D72EE79B2BB7B8BCA4C736A334369D
sha3_384: de4b0bf26e9fe05c8028db504a5c61a264ca3cb08deaff53fc71d551a6a0d9473120931c0c89fb8681129c4b83322105
ep_bytes: ff250020400000000000000000000000
timestamp: 2038-09-26 23:41:05

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: Convexe
FileVersion: 1.0.0.0
InternalName: Convexe.exe
LegalCopyright: Copyright © 2021
LegalTrademarks:
OriginalFilename: Convexe.exe
ProductName: Convexe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.2612053294 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.38239365
FireEyeTrojan.GenericKD.38239365
ALYacTrojan.GenericKD.38239365
CylanceUnsafe
ZillyaTrojan.DllInject.Win32.14754
K7AntiVirusUnwanted-Program ( 00577a381 )
K7GWUnwanted-Program ( 00577a381 )
CyrenW32/MSIL_Injector.XB.gen!Eldorado
ESET-NOD32a variant of MSIL/DllInject.ASN potentially unsafe
TrendMicro-HouseCallTROJ_GEN.R002H0CLD21
Paloaltogeneric.ml
BitDefenderTrojan.GenericKD.38239365
AvastWin32:MiscX-gen [PUP]
Ad-AwareTrojan.GenericKD.38239365
SophosGeneric PUA KJ (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
EmsisoftTrojan.GenericKD.38239365 (B)
GDataTrojan.GenericKD.38239365
MAXmalware (ai score=82)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftProgram:Win32/Uwamson.A!ml
McAfeeArtemis!D6C5CD6C9272
MalwarebytesMalware.AI.2612053294
APEXMalicious
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/DllInject
AVGWin32:MiscX-gen [PUP]

How to remove Malware.AI.2612053294?

Malware.AI.2612053294 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment