Malware

Should I remove “Malware.AI.609328213”?

Malware Removal

The Malware.AI.609328213 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.609328213 virus can do?

  • Uses Windows utilities for basic functionality
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.609328213?


File Info:

name: B24AB1F0E9266C1594F5.mlw
path: /opt/CAPEv2/storage/binaries/b9466bf7f763bf910994d8112dfdffa7a6e0ffee1fa41d99f6b4dda9b4968b1f
crc32: 45A2FE7F
md5: b24ab1f0e9266c1594f568a1c37a5f35
sha1: 14ca2365da6763a762c38a6998d3c0f3b6152410
sha256: b9466bf7f763bf910994d8112dfdffa7a6e0ffee1fa41d99f6b4dda9b4968b1f
sha512: 6d9b3546a7876c9b94728151dff22f1310ae29f5ac9a22339bfcaf908bf5a2e96ccb3fbd93d2e2bc6a03344e5896f4cab20e8c85ad8460973763767de8b037dc
ssdeep: 3072:d7DhdC6kzWypvaQ0FxyNTBfEMvNIlulAmE9GiNRNxZfw:dBlkZvaF4NTBMeNIlulAmk3xa
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E0E3AE41F3E201F7E6F2093100F6662F9736A3289714E8DBC74C2E925953AD5963E3E9
sha3_384: a36677b808cf3ff9d5e13470bc9453e53d6848801811f2a836b9cfc62c15df586adf1d9681632a28d03de434073e04d8
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:

FileVersion: Whiz#0700
ProductVersion: Whiz#0700
ProductName: Whiz#0700
OriginalFilename: Whiz#0700
InternalName: Whiz#0700
FileDescription: Whiz#0700
CompanyName: Whiz#0700
LegalTrademarks: Whiz#0700
LegalCopyright: Whiz#0700
PrivateBuild: Whiz#0700
SpecialBuild: Whiz#0700
Comments: Whiz#0700
Translation: 0x0000 0x04e4

Malware.AI.609328213 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
SkyhighBehavesLike.Win32.Generic.cc
McAfeeRDN/Real Protect-PENGSD5
MalwarebytesMalware.AI.609328213
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (W)
tehtrisGeneric.Malware
CynetMalicious (score: 100)
AvastWin32:Malware-gen
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
AhnLab-V3Trojan/Win.RealProtect-PENGSD5.C5265057
BitDefenderThetaGen:NN.ZexaF.36680.iu0@amPXKFd
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06I323
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
Cybereasonmalicious.5da676
DeepInstinctMALICIOUS

How to remove Malware.AI.609328213?

Malware.AI.609328213 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment