How to remove “Malware.AI.4238601861”?

The Malware.AI.4238601861 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4238601861 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.4238601861?


File Info:
name: 2B0F8009063365DC3A11.mlw
path: /opt/CAPEv2/storage/binaries/2c41a82e18bb68880cd78095666463695c35fbcce972061c167f5bb9b64d6d02
crc32: 188C1CF5
md5: 2b0f8009063365dc3a110bd964529266
sha1: 72e94c85c0f710cb3f08532e80bc2a792d4bf4e3
sha256: 2c41a82e18bb68880cd78095666463695c35fbcce972061c167f5bb9b64d6d02
sha512: 2f2942a366d44dcc66444d78e31aa6576a585ca045fba515a2251202a3c4eac757059bc67a0c8c277e0ab631d5c5a235612eef2c98d1c2d2581d6d7996de370a
ssdeep: 24576:YOfNkuu6oLsnhiBrCr484zCSbtMM1GJZyobaYiCkUbdTA7vzuS/wV27LzLJ:H61BT3uSbGJZyob7kUpUp/48LPJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D0A52509A147E27BFCEC08E7045090D0C3987FAA7B128DCDE97AD58A541F582B7B6D87
sha3_384: 3078405a4e88bbc4d994c0ad0beb2bb4adf1c05b2d61f5d0367f8508428567e198241dc2459403ffd07e3c23fc751e8c
ep_bytes: e808050000e988feffff3b0d58254300
timestamp: 2020-12-01 18:01:01

Version Info:
0: [No Data]

Malware.AI.4238601861 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.2b0f8009063365dc
CAT-QuickHeal	W32.BrowserAssistant.B7
McAfee	Artemis!2B0F80090633
K7GW	Trojan ( 0058de8b1 )
K7AntiVirus	Trojan ( 0058de8b1 )
Baidu	Archive.Bomb
Cyren	W32/BrowserAssist.A.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.ERBB
APEX	Malicious
Kaspersky	Trojan.Win32.Agent.xanbbn
Avast	Win32:Trojan-gen
Rising	Malware.Heuristic!ET#81% (RDMK:cmRtazo2hUYBNKLZ81GldH21/rXR)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/ATRAPS.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.vh
MAX	malware (ai score=66)
Antiy-AVL	Trojan[ArcBomb]/Win32.Agent
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
ZoneAlarm	Trojan.Win32.Agent.xanbbn
GData	Win32.Trojan.Kryptik.4XD5J1
Cynet	Malicious (score: 100)
Malwarebytes	Malware.AI.4238601861
Zoner	Probably Heur.RARAutorun
Ikarus	Trojan.Win32.Injector
Fortinet	W32/Injector.EQUG!tr
AVG	Win32:Trojan-gen
Panda	Trj/CI.A

How to remove Malware.AI.4238601861?

Malware.AI.4238601861 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X