What is “Malware.AI.4166592346”?

The Malware.AI.4166592346 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4166592346 virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.4166592346?


File Info:
name: 8EEBBE52FF10543C5EC4.mlw
path: /opt/CAPEv2/storage/binaries/d6780bc496a1bb5b0172b7b996219cb9e96d6ceca0e8e30df9985e73e1ae5ac1
crc32: 8DF7EC09
md5: 8eebbe52ff10543c5ec4d27788f4e213
sha1: 7bbc1ca68347a7096a4e3f61a45b31e678075aff
sha256: d6780bc496a1bb5b0172b7b996219cb9e96d6ceca0e8e30df9985e73e1ae5ac1
sha512: c498385673eb6a5f788652b3815609b45de21b25bae365db1317cc3d534ce08e9d575e37d9f48a64a4bd16b2066343bd98551824cd4fcedbdb7c12f0bb4b3cd0
ssdeep: 6144:yt8Egq4GHztiLz3Qo4LFreHHdGC+/kAL35OfxOROcdb2k+LkX3:yt8F7GHzsv3Z4LFrYGSz3Xy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T174747D9EF440C7A1D43B8AB0BDB86B65420DF97B1E993A3F1A7F782EE501654C011B63
sha3_384: 3c88c2d46fda30cfc6bf241aea62d6c4f76dbb3a7b247c5c51293e62a1dd20bb4c69397bfa2ccf8df2bdf186ee00a69d
ep_bytes: 6a00e846f7ffff56e8c4ffffff558bec
timestamp: 2006-04-06 04:34:44

Version Info:
CompanyName: SOFTWIN S.R.L.
FileDescription: BitDefender Management Conso
FileVersion: 73.9.12.76
InternalName: эгоцььацяшшуэщъбг щцффзтдьмтй
LegalCopyright: 8159-7594
OriginalFilename: 7GFG.exe
ProductName: жойрпсдьъгдуифяшс ццлюуцн
ProductVersion: 73.9.12.76
Translation: 0x04b0 0x0417

Malware.AI.4166592346 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed.20343
MicroWorld-eScan	Gen:Variant.Graftor.968691
FireEye	Generic.mg.8eebbe52ff10543c
McAfee	PWS-Zbot.gen.pq
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.200920
Sangfor	Spyware.Win32.Zbot.YW
K7AntiVirus	Spyware ( 00009b291 )
Alibaba	TrojanPSW:Win32/EncPk.ebcd1b83
K7GW	Spyware ( 00009b291 )
Cybereason	malicious.2ff105
BitDefenderTheta	Gen:NN.ZexaF.34232.wm0@aaRxirpc
VirIT	Trojan.Win32.Packed.BECL
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Zbot.YW
TrendMicro-HouseCall	Mal_Xed-11
Paloalto	generic.ml
ClamAV	Win.Spyware.Zbot-1282
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Graftor.968691
NANO-Antivirus	Trojan.Win32.Zbot.cqizll
Tencent	Malware.Win32.Gencirc.11bbdcde
Ad-Aware	Gen:Variant.Graftor.968691
Sophos	Mal/Generic-S + Mal/EncPk-OJ
Comodo	MalCrypt.Indus!@1qrzi1
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_Xed-11
McAfee-GW-Edition	BehavesLike.Win32.ZBot.ft
Emsisoft	Gen:Variant.Graftor.968691 (B)
Ikarus	Packed.Win32.Krap
GData	Gen:Variant.Graftor.968691
Jiangmin	Packed.Krap.csfw
Avira	HEUR/AGEN.1201282
Antiy-AVL	Trojan/Generic.ASMalwS.EBA577
Gridinsoft	Ransom.Win32.Zbot.sa
Arcabit	Trojan.Graftor.DEC7F3
ZoneAlarm	UDS:Trojan.Win32.Generic
Microsoft	PWS:Win32/Zbot.gen!Y
Cynet	Malicious (score: 100)
VBA32	Trojan.Zeus.EA.0999
ALYac	Gen:Variant.Graftor.968691
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.4166592346
Panda	Trj/Sinowal.XEG
APEX	Malicious
Rising	Spyware.Zbot!8.16B (CLOUD)
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
Fortinet	W32/Krypt.A!tr.dldr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.7164915.susgen

How to remove Malware.AI.4166592346?

Malware.AI.4166592346 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X