Malware

Should I remove “Malware.AI.2789224966”?

Malware Removal

The Malware.AI.2789224966 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2789224966 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2789224966?


File Info:

name: 08694B98A2EF6361E802.mlw
path: /opt/CAPEv2/storage/binaries/25d751b46e1250d67d3c12a50e59b6c7984ddd4db6d246af2d5ef8d3d2e3b74a
crc32: 5B11596B
md5: 08694b98a2ef6361e802eb2583c6eea1
sha1: f504475f25d9668138f09d3188a487bc89d23d2e
sha256: 25d751b46e1250d67d3c12a50e59b6c7984ddd4db6d246af2d5ef8d3d2e3b74a
sha512: 759edf83bfe1ad3d41299e040772625c006d708a6c1a4767d301bc1062d4f8f10a229b7151df233a7d9eb7f0f3ea60db00b8e287fe3c76feec4401095038220b
ssdeep: 24576:q5NmJsOL6xcVDqlBephOb9K9+ns/YzIc7JkDXRZ7:q52sOpOMOBKYnshc7ut
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1880512103AE6C0BFD29315318DECABF6B1EEEB484F25498723845B2D1A359E6D334B15
sha3_384: 5a696178983304bb0a3a27b865906b390425c2b350df4846873d6f03e193863c753193869720d1617000967a8cb048cb
ep_bytes: 558bec6aff68485f4200684423420064
timestamp: 2015-01-03 17:33:20

Version Info:

CompanyName: Igor Pavlov
FileDescription: 7z SFX
FileVersion: 9.38 beta
InternalName: 7z.sfx
LegalCopyright: : Igor Pavlov : Public domain
OriginalFilename: 7z.sfx.exe
ProductName: 7-Zip
ProductVersion: 9.38 beta
Translation: 0x0409 0x04b0

Malware.AI.2789224966 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38094936
FireEyeGeneric.mg.08694b98a2ef6361
ALYacTrojan.GenericKD.38094936
ZillyaTrojan.Updane.Win32.866
AlibabaTrojan:Win32/Updane.1235664f
SymantecTrojan.Gen.MBT
ESET-NOD32Win32/Updane.A
TrendMicro-HouseCallTROJ_GEN.R002H0CKM21
ClamAVWin.Virus.Dealply-7347758-0
BitDefenderTrojan.GenericKD.38094936
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Malware-gen
Ad-AwareTrojan.GenericKD.38094936
SophosMal/Generic-S
F-SecureTrojan.TR/Patched.DealPly.Gen8
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.BadFile.cc
EmsisoftTrojan.GenericKD.38094936 (B)
GDataWin32.Trojan.Agent.4G4POB
AviraTR/Patched.DealPly.Gen8
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Generic.D2454858
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!08694B98A2EF
MAXmalware (ai score=83)
MalwarebytesMalware.AI.2789224966
APEXMalicious
TencentTrojan.Win32.BitCoinMiner.la
FortinetW32/Updane.A!tr
AVGWin32:Malware-gen

How to remove Malware.AI.2789224966?

Malware.AI.2789224966 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment