Malware

How to remove “Malware.AI.2930299923”?

Malware Removal

The Malware.AI.2930299923 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2930299923 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2930299923?


File Info:

name: 15342ACE5617A9B8D37D.mlw
path: /opt/CAPEv2/storage/binaries/f99587abcd09d5a7cd7450ae4928acd08fa4aeff258d089a5bb47c6800917743
crc32: 05B4407B
md5: 15342ace5617a9b8d37d549ec7b271ed
sha1: 3ab9000bcdbb293a9fc0be913226c1fffe887fd4
sha256: f99587abcd09d5a7cd7450ae4928acd08fa4aeff258d089a5bb47c6800917743
sha512: c9c2ca452319fb401571ed8137ff9b10874281e5c964243afbe56a0dfd631060957cce3ec5b33d816938de525e219045d5e6c13f641831c0e9384355817dc952
ssdeep: 12288:h4qr1QbE7vI44/7EklFCaUSxHRoNSdizD3E9j:nPw444+F6SxmkYzK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1209402428B9D9260D0C59A7BF40E6821C7F5DF0C3CAF3215F2A6BD6BFA30554980BD5A
sha3_384: 1da8bb160cf59254001b3962f16b73e6026f3e6d94c41dca272a2fca2d2cc487abe65f5f5eeec386181e792209a1081a
ep_bytes: 60be15e073008dbeeb2fccff57eb0b90
timestamp: 2010-05-19 20:10:52

Version Info:

0: [No Data]

Malware.AI.2930299923 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (moderate confidence)
FireEyeGeneric.mg.15342ace5617a9b8
McAfeeRDN/Generic.dx
SangforTrojan.Win32.Agent.Vnt7
CrowdStrikewin/grayware_confidence_90% (W)
AlibabaTrojan:Win32/Generic.a1583708
CyrenW32/ABRisk.SPVA-8403
APEXMalicious
AvastWin32:Malware-gen
F-SecureHeuristic.HEUR/AGEN.1333619
McAfee-GW-EditionRDN/Generic.dx
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1333619
Antiy-AVLTrojan/Win32.PossibleThreat
GoogleDetected
AhnLab-V3Malware/Win.Generic.C5253634
MalwarebytesMalware.AI.2930299923
TrendMicro-HouseCallTROJ_GEN.R002H0CDH23
RisingTrojan.Generic@AI.98 (RDML:dZ3CURiMU4oW5bWHv3ahPg)
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Malware.AI.2930299923?

Malware.AI.2930299923 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment