Should I remove “Malware.AI.3168668540”?

The Malware.AI.3168668540 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3168668540 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3168668540?


File Info:
name: 62AF5459797E5489CABC.mlw
path: /opt/CAPEv2/storage/binaries/0fa9af4728b5cb08dd472027c65280a4ca4840129dcba5f78d286b7b292b4857
crc32: 5DDBAAD8
md5: 62af5459797e5489cabcc26b87a93c04
sha1: ac2dd365f2c7befe7a6e9f0ad5573898057f5b9d
sha256: 0fa9af4728b5cb08dd472027c65280a4ca4840129dcba5f78d286b7b292b4857
sha512: 09f1352057730c17a940248d27e9fa0ef83ef86e3530cb546f72aea23baab9ced17c691eacae3fd1047c181fac821f09060571f34c97c1665aabce804101ffd6
ssdeep: 49152:HzpJtWHO82g2CYEX1m4nkpBl0OjI2PTqE:1JcJR2Z4nknl0kI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E785226F7AD68F90C38A2075C0E3D02403E2A9C76773D7863E4456D68D467A6BD9F2C8
sha3_384: edb3885fc18e86619daa9d30ddbf59bfcf788aef0bcf4f445a1f996213397157f291ff83145230dfe7cb430894bb29e2
ep_bytes: ff250020400000000000000000000000
timestamp: 2056-02-22 09:42:54

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: hwalker
FileVersion: 1.0.0.0
InternalName: valosins.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: valosins.exe
ProductName: hwalker
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3168668540 also known as:

Lionic	Trojan.Win32.Tedy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.30982
FireEye	Generic.mg.62af5459797e5489
McAfee	GenericRXPT-DJ!62AF5459797E
Cylance	Unsafe
Sangfor	Backdoor.Win32.Bladabindi.ml
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5f2c7b
BitDefenderTheta	Gen:NN.ZemsilF.34182.Qn0@amM9Ync
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Tedy.30982
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Tedy.30982
Emsisoft	Gen:Variant.Tedy.30982 (B)
McAfee-GW-Edition	GenericRXPT-DJ!62AF5459797E
Sophos	Mal/Generic-S
Ikarus	Trojan.Dropper
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.348FB89
Microsoft	Trojan:Win32/Mamson.A!ac
GData	Gen:Variant.Tedy.30982
SentinelOne	Static AI – Malicious PE
Malwarebytes	Malware.AI.3168668540
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:A6gYRcaQaB8VwWszm9l1Lw)
MAX	malware (ai score=84)
eGambit	Unsafe.AI_Score_99%
Fortinet	PossibleThreat.PALLASNET.H
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.3168668540?

Malware.AI.3168668540 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X