About “Malware.AI.697339975” infection

The Malware.AI.697339975 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.697339975 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.697339975?


File Info:
name: C169C4A4843B6588CA71.mlw
path: /opt/CAPEv2/storage/binaries/8d9e1eb9ad470c10d8487d94cd97e65c24fb04ab1718ddf4028e480329552e9f
crc32: 651E0DAE
md5: c169c4a4843b6588ca71fdacfed97149
sha1: 41a3dce3c291333f289b27e64bb35adca6332f9e
sha256: 8d9e1eb9ad470c10d8487d94cd97e65c24fb04ab1718ddf4028e480329552e9f
sha512: f26bd8a4673744a46096774ebb5659b9e296345296cf06588bafe4861744a427a6225ec924a3940f4202be7ca1e2923847f99cf99247ed2c138aa32d3f344df6
ssdeep: 768:MXb8XZsekljg78R+jmrJ3WrpxXqmOQOQgNP56c5fl4h:+b8XZSl0IRUmrYr/XnXng7J5t4h
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157431782B6E0C977C15A02365C48EEE3B51AB878EFE4E15334EE035FAA552F14A32701
sha3_384: b7d7d6efed5603fbf19d8266ab5f9e2550eed028ea9dd425cb8de303f15bea0edb530638ecb27253cd89668815b23ddd
ep_bytes: 60be008041008dbe0090feff57eb0b90
timestamp: 2010-11-04 07:30:53

Version Info:
0: [No Data]

Malware.AI.697339975 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Fragtor.129977
FireEye	Generic.mg.c169c4a4843b6588
McAfee	Artemis!C169C4A4843B
Malwarebytes	Malware.AI.697339975
VIPRE	Gen:Variant.Fragtor.129977
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.129977
Ad-Aware	Gen:Variant.Fragtor.129977
Emsisoft	Gen:Variant.Fragtor.129977 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
McAfee-GW-Edition	BehavesLike.Win32.Dropper.qt
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1200444
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.82BA
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Fragtor.129977
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.C116605
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34698.dmW@amp5EQm
ALYac	Gen:Variant.Fragtor.129977
Cylance	Unsafe
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.188152821.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
Cybereason	malicious.3c2913
Avast	Win32:Malware-gen

How to remove Malware.AI.697339975?

Malware.AI.697339975 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X