Malware

What is “Malware.AI.2903210701”?

Malware Removal

The Malware.AI.2903210701 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Malware.AI.2903210701 virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2903210701?


File Info:

name: 04B668A6A25D1BD10C0F.mlw
path: /opt/CAPEv2/storage/binaries/90e037b007d86626f7f0a20e6c466680083935b97828a3c710e62388ff10a959
crc32: F4953AD8
md5: 04b668a6a25d1bd10c0f4bc8a4f4ff17
sha1: fe5512aa080b027acf28716223affdc39f7d5027
sha256: 90e037b007d86626f7f0a20e6c466680083935b97828a3c710e62388ff10a959
sha512: ed93aa06c10a2beb7b3a84aec2318c9e011982eecd7eb8e1aa4d543d7c7f8c314aaf40d8b9149211b1e4f3f169c4832db87370dbe4bd136c9426b4171a1bd2f2
ssdeep: 6144:VdIgG2E4OE5mraIVPYrIMSZr+PKWbluNxesZckN23LOtbBtH:dG2E4OEgraIV/dF+yWblyesDNYqBtH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T182445A62FA40C433F5C20172A7BA0BFB9D3DA629271A50D3A3F51DA45A681E1B57C34F
sha3_384: 3d7f0f0cca0f8195b9670f1df07d861dce00c242160d42977bb5cbd081c077cc96b10111c77e472d17b30ea9cc2627ad
ep_bytes: e83e080000e963fdffffff2570724300
timestamp: 2020-08-27 02:50:16

Version Info:

0: [No Data]

Malware.AI.2903210701 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Gofot.4!c
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Zusy.427232
FireEyeGeneric.mg.04b668a6a25d1bd1
ALYacGen:Variant.Midie.92190
CylanceUnsafe
SangforWorm.Win32.Save.a
K7AntiVirusTrojan ( 0056d83a1 )
AlibabaTrojan:Win32/Gofot.cef070d6
K7GWTrojan ( 0056d83a1 )
Cybereasonmalicious.6a25d1
CyrenW32/Agent.DIU.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32Win32/Agent.ACHA
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Johnnie-9953158-0
KasperskyHEUR:Trojan.Win32.Gofot.gen
BitDefenderGen:Variant.Zusy.427232
NANO-AntivirusTrojan.Win32.Graftor.htrolo
AvastWin32:Trojan-gen
TencentWin32.Trojan.Gofot.Fry
Ad-AwareGen:Variant.Zusy.427232
EmsisoftGen:Variant.Zusy.427232 (B)
ZillyaTrojan.Agent.Win32.1402534
TrendMicroTROJ_GEN.R002C0PFM22
McAfee-GW-EditionGenericRXPD-YA!04B668A6A25D
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Zusy.427232
JiangminTrojan.Gofot.axo
AviraHEUR/AGEN.1208052
ArcabitTrojan.Midie.D1681E
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R349778
Acronissuspicious
McAfeeGenericRXPD-YA!04B668A6A25D
MAXmalware (ai score=83)
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.2903210701
TrendMicro-HouseCallTROJ_GEN.R002C0PFM22
RisingAdware.Downloader!1.CB02 (CLASSIC)
YandexTrojan.Agent!wwykrPQ+LGM
IkarusTrojan.Win32.Agent
MaxSecureTrojan.Malware.103056072.susgen
FortinetW32/Agent.ACHA!tr
BitDefenderThetaGen:NN.ZexaF.34742.quX@auAj0Aei
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.2903210701?

Malware.AI.2903210701 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment