About “Malware.AI.2697020849” infection

The Malware.AI.2697020849 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2697020849 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.2697020849?


File Info:
name: 0CD6975BFDDB5B03F1D9.mlw
path: /opt/CAPEv2/storage/binaries/7d8a5a42240eff05ea1f6873e2d45be50f064b7a875895d1796974781ea5a66a
crc32: C191A368
md5: 0cd6975bfddb5b03f1d9260277b54c2d
sha1: 25440ef18b013cc7945e491390324d2cd0759e44
sha256: 7d8a5a42240eff05ea1f6873e2d45be50f064b7a875895d1796974781ea5a66a
sha512: d7dd12b602057cdf21808c528733b4bdc670d9eef8278b732cf5211bfa46d1268b41c6dec2065d51c97432ce24bb1a7184c463801dffe4a82f144fa437bbc56d
ssdeep: 12288:qi8uHCCJjy+5+JL0dLo1d1W8qi8uHCCJjy+5+JL0dLo1d1W8T:qfCJZ5+t0pOdRqfCJZ5+t0pOdRT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BE159F40779040F9D0B3523285F29B35AA7DBC614B61A70F93A85A7D5F323C0AB357B6
sha3_384: 9f10e01a705c7590d95631212764a15d3007ce3b3e8e8424f2a547ab5b533ab50892ec5104d257a5807fb4178efe5059
ep_bytes: 00008000020000000000800002000000
timestamp: 2007-08-17 12:43:04

Version Info:
0: [No Data]

Malware.AI.2697020849 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.0cd6975bfddb5b03
McAfee	GenericRXAA-FA!0CD6975BFDDB
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.bfddb5
Cyren	W32/Autorun.DB.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
ClamAV	Win.Trojan.Agent-678024
BitDefender	Gen:Variant.Fragtor.18311
MicroWorld-eScan	Gen:Variant.Fragtor.18311
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Fragtor.18311 (B)
Comodo	TrojWare.Win32.FraudPack.P@2ysxyk
DrWeb	Win32.HLLW.Autoruner.547
Zillya	Worm.AutoRun.Win32.236079
McAfee-GW-Edition	BehavesLike.Win32.Generic.dm
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Patched
Jiangmin	Worm.AutoRun.avyz
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2A9C931
Microsoft	Trojan:Win32/Sabsik!ml
GData	Gen:Variant.Fragtor.18311
BitDefenderTheta	Gen:NN.ZexaF.34182.4qZ@a496!5j
ALYac	Gen:Variant.Fragtor.18311
MAX	malware (ai score=81)
VBA32	TrojanDropper.Agent
Malwarebytes	Malware.AI.2697020849
TrendMicro-HouseCall	TROJ_GEN.R03BH0CAV22
Rising	Trojan.Woreflint!8.F5EA (RDMK:cmRtazpOK1XexhZtghd+0mEbIF3f)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.19E9!tr
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.121218.susgen

How to remove Malware.AI.2697020849?

Malware.AI.2697020849 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X