What is “Malware.AI.2903210701”?

The Malware.AI.2903210701 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2903210701 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.2903210701?


File Info:
name: 04B668A6A25D1BD10C0F.mlw
path: /opt/CAPEv2/storage/binaries/90e037b007d86626f7f0a20e6c466680083935b97828a3c710e62388ff10a959
crc32: F4953AD8
md5: 04b668a6a25d1bd10c0f4bc8a4f4ff17
sha1: fe5512aa080b027acf28716223affdc39f7d5027
sha256: 90e037b007d86626f7f0a20e6c466680083935b97828a3c710e62388ff10a959
sha512: ed93aa06c10a2beb7b3a84aec2318c9e011982eecd7eb8e1aa4d543d7c7f8c314aaf40d8b9149211b1e4f3f169c4832db87370dbe4bd136c9426b4171a1bd2f2
ssdeep: 6144:VdIgG2E4OE5mraIVPYrIMSZr+PKWbluNxesZckN23LOtbBtH:dG2E4OEgraIV/dF+yWblyesDNYqBtH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T182445A62FA40C433F5C20172A7BA0BFB9D3DA629271A50D3A3F51DA45A681E1B57C34F
sha3_384: 3d7f0f0cca0f8195b9670f1df07d861dce00c242160d42977bb5cbd081c077cc96b10111c77e472d17b30ea9cc2627ad
ep_bytes: e83e080000e963fdffffff2570724300
timestamp: 2020-08-27 02:50:16

Version Info:
0: [No Data]

Malware.AI.2903210701 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Gofot.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Zusy.427232
FireEye	Generic.mg.04b668a6a25d1bd1
ALYac	Gen:Variant.Midie.92190
Cylance	Unsafe
Sangfor	Worm.Win32.Save.a
K7AntiVirus	Trojan ( 0056d83a1 )
Alibaba	Trojan:Win32/Gofot.cef070d6
K7GW	Trojan ( 0056d83a1 )
Cybereason	malicious.6a25d1
Cyren	W32/Agent.DIU.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Agent.ACHA
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Johnnie-9953158-0
Kaspersky	HEUR:Trojan.Win32.Gofot.gen
BitDefender	Gen:Variant.Zusy.427232
NANO-Antivirus	Trojan.Win32.Graftor.htrolo
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Gofot.Fry
Ad-Aware	Gen:Variant.Zusy.427232
Emsisoft	Gen:Variant.Zusy.427232 (B)
Zillya	Trojan.Agent.Win32.1402534
TrendMicro	TROJ_GEN.R002C0PFM22
McAfee-GW-Edition	GenericRXPD-YA!04B668A6A25D
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.427232
Jiangmin	Trojan.Gofot.axo
Avira	HEUR/AGEN.1208052
Arcabit	Trojan.Midie.D1681E
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R349778
Acronis	suspicious
McAfee	GenericRXPD-YA!04B668A6A25D
MAX	malware (ai score=83)
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.2903210701
TrendMicro-HouseCall	TROJ_GEN.R002C0PFM22
Rising	Adware.Downloader!1.CB02 (CLASSIC)
Yandex	Trojan.Agent!wwykrPQ+LGM
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.103056072.susgen
Fortinet	W32/Agent.ACHA!tr
BitDefenderTheta	Gen:NN.ZexaF.34742.quX@auAj0Aei
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.2903210701?

Malware.AI.2903210701 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X