Malware.AI.3002066624 (file analysis)

The Malware.AI.3002066624 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3002066624 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.3002066624?


File Info:
crc32: 92F73B38
md5: d9334c0dc7ad5327fb28d798a5e15873
name: D9334C0DC7AD5327FB28D798A5E15873.mlw
sha1: d29040c2d40a914f38c75e47193b351d33a60141
sha256: 0e98b13655376143973dd98c909b5965674c62ea37633c71f0d9111fb13a52dc
sha512: 4a70938f8b047710082d3aceeb5cb6ba603a483afe065e26048ee21bb80c0b7b36cadf5632066a13689a11afaeaf4e917272842f0dbb98f6471c6e7820217295
ssdeep: 12288:e6lfrHYmIjE7SQBmed1hr61DUtLpm1EwtLpm1EeAwSfxL/2Dc3jDLLmt0LDQewsU:9lzl7t7WUtLpwbtLpwkaewsAjX73
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: ICWCONN2
FileVersion: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.2180
FileDescription: Internet Connection Wizard
OriginalFilename: ICWCONN2.EXE
Translation: 0x0409 0x04b0

Malware.AI.3002066624 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Sdum.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Ransomware.c2ad6715
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Emotet.BBS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.WannaCry-9856297-0
Kaspersky	VHO:Trojan.Win32.Sdum.gen
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Virut.dh
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.Win32.Sdum.4!c
AhnLab-V3	Malware/Win.Generic.C4468049
McAfee	RDN/Generic.com
Malwarebytes	Malware.AI.3002066624
Rising	Trojan.Sdum!8.1155F (CLOUD)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Malware.AI.3002066624?

Malware.AI.3002066624 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X