Malware

Malware.AI.2903224546 information

Malware Removal

The Malware.AI.2903224546 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2903224546 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Ukrainian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2903224546?


File Info:

name: 18413A986C8D7358D6BC.mlw
path: /opt/CAPEv2/storage/binaries/130bff84ac357f4f94eaaacc9d7b5efb30e4cde3599611a347495c507eaf5f13
crc32: 41D938C5
md5: 18413a986c8d7358d6bccc40b30e39b7
sha1: de3bb630e2749aa8fc19065db0f545c31b184da7
sha256: 130bff84ac357f4f94eaaacc9d7b5efb30e4cde3599611a347495c507eaf5f13
sha512: 26bd56208355482bd34a2af7c1375921b5e4cca59b50374b50c29f85d8c79e7fa8b46da719c8ff85de3e86017f228ecf02b60659fed7d5bbe3e762a14406dbb2
ssdeep: 24576:+Y++hGfAXZadjf4kTEeUWZ6lLLXISHXnr0iNxnZ5gsRy+u2TY6:+poupAlUsZGa9TY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9657D32F680D837D1632B34CC0BC5D699297E243D68684F7AD92F4C6B397427A1A5CB
sha3_384: 252ba5e2400c25b87a0bac35f50ab3e2d562c3e4991ddb1029bd538f038716bd9ca7c8a307871006b3a0df772d928c97
ep_bytes: 558bec83c4f053b888b25200e823bded
timestamp: 1992-06-19 22:22:17

Version Info:

Comments:
CompanyName: Click And Deploy (Pte. Ltd.)
FileDescription: AlertDispatcher Messaging
FileVersion: 8.115.1008.0
InternalName: AlertDispatcher
LegalCopyright: Click And Deploy (Pte. Ltd.)
OriginalFilename:
PrivateBuild:
ProductName: AlertDispatcher
ProductVersion: 8.115.1008.0
Translation: 0x4809 0x04b0

Malware.AI.2903224546 also known as:

LionicHacktool.Win32.Convagent.x!c
MicroWorld-eScanGen:Variant.Zusy.408681
FireEyeGen:Variant.Zusy.408681
ALYacGen:Variant.Zusy.408681
ZillyaTrojan.Convagent.Win32.7910
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R011C0WKU21
KasperskyVHO:Packed.Win32.Convagent.gen
BitDefenderGen:Variant.Zusy.408681
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Zusy.408681
EmsisoftGen:Variant.Zusy.408681 (B)
TrendMicroTROJ_GEN.R011C0WKU21
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
SophosMal/Generic-S
MAXmalware (ai score=84)
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Zusy.D63C69
GDataGen:Variant.Zusy.408681
McAfeeGenericRXAA-FA!18413A986C8D
VBA32BScope.Trojan.Tasker
MalwarebytesMalware.AI.2903224546
APEXMalicious
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Malware.AI.2903224546?

Malware.AI.2903224546 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment