Malware

About “Malware.AI.466797493” infection

Malware Removal

The Malware.AI.466797493 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.466797493 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.466797493?


File Info:

name: CAC1E03BFCC52669FAE4.mlw
path: /opt/CAPEv2/storage/binaries/b52cc2b072892c676ec5f40ef665535910a03d580e410034efd26ca600a2e1f0
crc32: BBB403EB
md5: cac1e03bfcc52669fae4ed842e24f45f
sha1: 2d11f6965c6b1ac98aa843525d31444b9a5266ad
sha256: b52cc2b072892c676ec5f40ef665535910a03d580e410034efd26ca600a2e1f0
sha512: d68b0615859a62901d40d07e6385fda0d336e7707fee7779df09961b903e67cf8800c21b184329cfa7a203b0dbaee3ce777b0a46cd63d7e95f3971200a69c86a
ssdeep: 96:mBeTTYtOvLGa6rzHdwAnQWRRUG2CqD5YZSNbQx80mswqeogUAe0PowCmh:mBSYtxrzfQWRRvNZyNoqcG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T149C243796FD54972F3B78E7589F245CABA7470233E028D9E90AB03850813A95DDB0F1E
sha3_384: ac824f6499135407ff8497edd8d2941d2638e369801d71a19b565546d5bf31ce3f261bda5158ee2b10916599bb035a8a
ep_bytes: 81ec3408000053555633f65756897424
timestamp: 2014-05-13 06:48:46

Version Info:

0: [No Data]

Malware.AI.466797493 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Ppatre.Gen.1
ClamAVWin.Downloader.Upatre-9958164-0
FireEyeGeneric.mg.cac1e03bfcc52669
McAfeeGenericRXAA-FA!CAC1E03BFCC5
MalwarebytesMalware.AI.466797493
VIPRETrojan.Ppatre.Gen.1
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0055f33b1 )
K7GWTrojan-Downloader ( 0055f33b1 )
Cybereasonmalicious.65c6b1
VirITTrojan.Win32.Upatre.AS
CyrenW32/S-47db96bb!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.Waski.B
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.Upatre.gen
BitDefenderTrojan.Ppatre.Gen.1
NANO-AntivirusTrojan.Win32.DownLoad3.gkgmlr
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-Downloader.Win32.Upatre.we
SophosMal/EncPk-ACO
DrWebTrojan.DownLoad3.33216
ZillyaDownloader.Waski.Win32.56055
TrendMicroTROJ_UPATRE.SM37
Trapminesuspicious.low.ml.score
EmsisoftTrojan.Ppatre.Gen.1 (B)
IkarusTrojan-Downloader.Win32.Waski
GDataWin32.Trojan-Downloader.Upatre.BJ
JiangminTrojanSpy.Zbot.ffhh
WebrootW32.Trojan.Dropper
Antiy-AVLTrojan/Win32.Waski.a
XcitiumTrojWare.Win32.TrojanDownloader.Waski.ADW@8mzp93
ArcabitTrojan.Ppatre.Gen.1
ZoneAlarmHEUR:Trojan-Downloader.Win32.Upatre.gen
MicrosoftTrojanDownloader:Win32/Upatre.AA
GoogleDetected
AhnLab-V3Trojan/Win32.Upatre.R158192
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36738.buX@a8wI!mdi
ALYacTrojan.Ppatre.Gen.1
MAXmalware (ai score=84)
VBA32SScope.Trojan-Downloader.1454
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
RisingDropper.Injector!8.DC (TFE:3:JrFJf4jCRlD)
YandexTrojan.Agent!k12WZzLubRE
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.B!tr.dldr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.466797493?

Malware.AI.466797493 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment