Malware.AI.2659057832 removal tips

The Malware.AI.2659057832 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2659057832 virus can do?

A file was accessed within the Public folder.
Installs a browser addon or extension
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2659057832?


File Info:
name: 35D85E48342C35CE9A9A.mlw
path: /opt/CAPEv2/storage/binaries/476ce8d1e160d845690af716bc315a53da33f8be2ae6e2f7abf9c4ac79baf608
crc32: AE76298C
md5: 35d85e48342c35ce9a9a488cdd925bc6
sha1: 1176eedf5fbb03f9c3ff8ad6f011f479e6e2011e
sha256: 476ce8d1e160d845690af716bc315a53da33f8be2ae6e2f7abf9c4ac79baf608
sha512: 1f11251d1dbfa96e507be02c4262c45c48c13c78190099261b4bcb29b72e4745227e358d8337bcadf73552908f3df162169123f85dc806ddee78fa6be3b43392
ssdeep: 96:KxRc4Mbg1RGlB5+hQi+5Fb93gvQJi+02joI6zTRS9xjNiY99g+eRi6:KxRk0HGchvQJa5RSQYLghJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CEF1F7524C90CA7AE911323228A602B99BB9C06447B670D76BB3F7F27A92406650E2C7
sha3_384: 708dcf8442e97c06d120e8f7acefb7aa2c11d5baef25d663a23023c41edd2553a39a79aef10fc3484488f7bbcac5b824
ep_bytes: e8eb010000e88701000033c0c3909090
timestamp: 2023-06-19 13:51:18

Version Info:
0: [No Data]

Malware.AI.2659057832 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Babar.4!c
MicroWorld-eScan	Gen:Variant.Babar.54008
FireEye	Generic.mg.35d85e48342c35ce
Cylance	unsafe
Sangfor	Trojan.Win32.Save.BlackMoon
Alibaba	Trojan:Win32/MalwareX.2dd9dede
Cybereason	malicious.8342c3
Arcabit	Trojan.Babar.DD2F8
BitDefenderTheta	Gen:NN.ZexaF.36350.amW@a0XncMk
Cyren	W32/Blackmoon.CM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.BlackMoon.D suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0PFS23
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Babar.54008
Avast	Win32:MalwareX-gen [Trj]
Sophos	Mal/Generic-S (PUA)
VIPRE	Gen:Variant.Babar.54008
TrendMicro	TROJ_GEN.R002C0PFS23
McAfee-GW-Edition	RDN/Real Protect-LS
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Babar.54008 (B)
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Dropper]/Win32.Dinwod.acqn
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Win32.Trojan-Stealer.BlackMoon.D
AhnLab-V3	Trojan/Win32.OnlineGameHack.C164631
Malwarebytes	Malware.AI.2659057832
APEX	Malicious
Rising	Trojan.Generic@AI.85 (RDML:K7oJtfd6J2VG4eCqZpsGMw)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.WP!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_70% (D)

How to remove Malware.AI.2659057832?

Malware.AI.2659057832 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X