About “Malware.AI.4102530668” infection

The Malware.AI.4102530668 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4102530668 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.4102530668?


File Info:
name: 3D73A6F01E03A4D7B1EF.mlw
path: /opt/CAPEv2/storage/binaries/42c40e4675142c8df3e572f3622f05fe69e9769229e32b4fec8a8333c35abc8b
crc32: 39D568EC
md5: 3d73a6f01e03a4d7b1ef8d2e224fa568
sha1: 111f609e94689379606ce2da8f2cb48dc5ba4b6d
sha256: 42c40e4675142c8df3e572f3622f05fe69e9769229e32b4fec8a8333c35abc8b
sha512: 843163e54958cf822eaf1a8e85a8fac4e0c30755905af7f5af8fe6c22473523111d69cfd4b575332e17fa251293ca8a14d6bc86f5942fb432bcbec8073703a6f
ssdeep: 49152:Uw3yd2OluON4fA9uQljHLfUUoJdXN0BMOwLloBrugtmDta4R:jJdXN0B7+sjCh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T172C57D2EFF60CDB6D13201308956D36D9266BD708B234587B284BA0DDD71FC26D7AA27
sha3_384: fe270959e34309522fe69b0a16757fd9d837e1116603bb313982a97b250c3c3019587ea27d2fea77fd80d1989c71187d
ep_bytes: e8ddfeffff6a5c6828644000e8270400
timestamp: 2006-10-27 22:12:40

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Office Groove
FileVersion: 12.0.4518.1014
InternalName: Groove
LegalCopyright: © 2006 Microsoft Corporation.  All rights reserved.
OriginalFilename: Groove.exe
ProductName: Microsoft Office Groove
ProductVersion: 4.2.0.2623
Translation: 0x0000 0x04b0

Malware.AI.4102530668 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.3d73a6f01e03a4d7
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Cyren	W32/Emotet.BBS.gen!Eldorado
APEX	Malicious
ClamAV	Win.Ransomware.WannaCry-9856297-0
Avast	FileRepMalware
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Trojan.vh
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.JM7ODA
Jiangmin	Packed.Krap.gvwj
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!3D73A6F01E03
VBA32	Trojan.Downloader
Malwarebytes	Malware.AI.4102530668
Ikarus	Trojan-Dropper.Win32.Qhost
Fortinet	W32/Emotet.212B!tr
AVG	FileRepMalware
MaxSecure	Trojan.Malware.121218.susgen

How to remove Malware.AI.4102530668?

Malware.AI.4102530668 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X