How to remove “Malware.AI.3096915945”?

The Malware.AI.3096915945 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3096915945 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Malware.AI.3096915945?


File Info:
name: 6A5092CECFE07EE7E802.mlw
path: /opt/CAPEv2/storage/binaries/724bc241d4e8e42fe1593cd47b92bf7b90cba5d7e03606744527df296712c68b
crc32: 3B8469B1
md5: 6a5092cecfe07ee7e8023343b170bab4
sha1: 9a9946a0777a89be7afb2afe52e1d1ded39a550e
sha256: 724bc241d4e8e42fe1593cd47b92bf7b90cba5d7e03606744527df296712c68b
sha512: c3ff3231c461a20089486a76fb9c249801a541fdcb6fb4a28959bfc9d4d498e546420cf84a184efa75dcebad576d5b915b8c8200054dcdb46f0418f04e2f1157
ssdeep: 3072:JVyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLz:LyymJYNgctwLU21/Rb2/fY9O
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18F44C576E304551DE87E433DB01C38B09E707CA2E16ED32E45FA7AED683BB498A145D2
sha3_384: 47fa74639608ce89dbeb96817ddec952cd5cf8209e2fa8772a690694472f78bb8a6dc5d3fc9903ea3d1ad3ea0e903bf3
timestamp: 2059-07-18 13:11:07

Version Info:
0: [No Data]

Malware.AI.3096915945 also known as:

FireEye	Generic.mg.6a5092cecfe07ee7
Skyhigh	BehavesLike.Win32.Generic.dm
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Unwanted-Program ( 0059886f1 )
K7AntiVirus	Unwanted-Program ( 0059886f1 )
Elastic	malicious (moderate confidence)
APEX	Malicious
ClamAV	Win.Malware.Trojanx-9862538-0
Rising	Trojan.Generic@AI.100 (RDML:DeGNV2tKAaCoWH+w1SOCOg)
Sophos	Generic ML PUA (PUA)
Google	Detected
Ikarus	Trojan-Spy.RedLineStealer
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Script/Phonzy.B!ml
Gridinsoft	Malware.Win32.RedLine.bot
Xcitium	Heur.Corrupt.PE@1z141z3
Cynet	Malicious (score: 100)
DeepInstinct	MALICIOUS
Malwarebytes	Malware.AI.3096915945
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.218663034.susgen
Cybereason	malicious.0777a8

How to remove Malware.AI.3096915945?

Malware.AI.3096915945 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X