About “Malware.AI.4208497653” infection

The Malware.AI.4208497653 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4208497653 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.4208497653?


File Info:
name: D568A2DC4A86251AA22E.mlw
path: /opt/CAPEv2/storage/binaries/84f10a304bdd9cdae9dfde9a57c98888ed2cde44813a7906a50032011d4b801c
crc32: 3A2B5533
md5: d568a2dc4a86251aa22efb54da4b2516
sha1: 0f6545c82403b286cac0ca2a04bf83bcfded1022
sha256: 84f10a304bdd9cdae9dfde9a57c98888ed2cde44813a7906a50032011d4b801c
sha512: a122446941d926bf181517f76ad79345717ba591bbc9c86b552964bbdd9943027a0796fcdb3d8595445419d8b15b521a6acc2be4dda6ecd1c978295b4a96c94d
ssdeep: 1536:5yTXVPJsz/Lsc4Bjw5KRCeO1OvOk1iwXaiaBGBa17vSy:5uVebLAWFxcWQ7K1sMd6y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13293FEAE14B95E9EF1327CB01B6BE2B0365B467D47031506EB292B64DD37F526B38803
sha3_384: 0fa0042d83aa3a11c8e8af2381bfbdb1cbdaa714eec2d7d7a0136251d5ff7394ac0e32a6c377932a5fcb5692b58fd286
ep_bytes: 020094fe020084fe020074fe020064fe
timestamp: 2013-01-11 17:24:55

Version Info:
CompanyName: Firefox
ProductName: Firefox
FileVersion: 25.34.0005
ProductVersion: 25.34.0005
InternalName: Mozilla Corporation
OriginalFilename: Firefox.exe
Translation: 0x0409 0x04b0

Malware.AI.4208497653 also known as:

Lionic	Trojan.Win32.Generic.l4p9
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.AXYV
ClamAV	Win.Dropper.Agent-1822936
FireEye	Generic.mg.d568a2dc4a86251a
ALYac	Trojan.Agent.AXYV
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3178450
Sangfor	Suspicious.Win32.Save.vb
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/vobfus.1030
K7GW	Trojan ( 0040f4371 )
K7AntiVirus	Trojan ( 0040f4371 )
BitDefenderTheta	Gen:NN.ZevbaF.36132.fm0@aS1jEyj
VirIT	Trojan.Win32.Generic.AMPG
Cyren	W32/VBInject.DF.gen!Eldorado
Symantec	Trojan.Gen.MBT
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.AXYV
NANO-Antivirus	Trojan.EFI.VB.cpnnfd
SUPERAntiSpyware	Trojan.Agent/Gen-Defmid
Tencent	Malware.Win32.Gencirc.10b25fbe
Emsisoft	Trojan.Agent.AXYV (B)
F-Secure	Trojan.TR/Beebone.iiuzoi
VIPRE	Trojan.Agent.AXYV
TrendMicro	TROJ_GEN.R067C0PLJ22
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.mt
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
Ikarus	Worm.Win32.VBNA
GData	Trojan.Agent.AXYV
Jiangmin	Trojan.Generic.dyoxo
Webroot	W32.Trojan.Gen
Avira	TR/Beebone.iiuzoi
Antiy-AVL	Trojan/Win32.Unknown
Xcitium	TrojWare.Win32.Kreeper.~VKC@1r2tkw
Arcabit	Trojan.Agent.AXYV
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win32.VBInject.R49156
McAfee	GenericRXFA-GH!D568A2DC4A86
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.4208497653
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R067C0PLJ22
Rising	Trojan.VB!1.66B9 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.2588.susgen
Fortinet	W32/Injector.SE!tr
DeepInstinct	MALICIOUS

How to remove Malware.AI.4208497653?

Malware.AI.4208497653 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X