Malware

What is “Malware.AI.802604168”?

Malware Removal

The Malware.AI.802604168 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.802604168 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Malware.AI.802604168?


File Info:

crc32: DBF81354
md5: 628e2006e518c70c025062989f6d4646
name: 628E2006E518C70C025062989F6D4646.mlw
sha1: c5c0b03a341d258dbe446fd8cf45991bdcc72756
sha256: 1e57f18e36a9fac7f01b66fdacf178894feb7a23fea5b4ad3ee746a1e061b5fa
sha512: 8f4172fccbe3df0fc0ddaa08bfd377a55bbb05033f3f66650b9af45def13e96eb3dd63984aef0d14db356e01987c1e44cf56c4651447938756a4be4251e3bb4e
ssdeep: 49152:wl8eOjCwlH20MmpBytGtakNVPXumAPBwwJFwl6:wZUI0MmLyR2x+mh8x
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Setup Engine Copyright xa9 2004 Indigo Rose Corporation
InternalName: suf70_launch
FileVersion: 7.0.1.0
CompanyName:
PrivateBuild:
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: Created with Setup Factory 7.0
ProductName: Setup Factory 7.0 Runtime
SpecialBuild:
ProductVersion: 7.0.1.0
FileDescription: Setup Application
OriginalFilename: suf70_launch.exe
Translation: 0x0409 0x04e4

Malware.AI.802604168 also known as:

K7AntiVirusTrojan ( 004ba3181 )
DrWebTrojan.Hooker.21388
CynetMalicious (score: 99)
ALYacTrojan.Agent.BCOT
CylanceUnsafe
K7GWTrojan ( 004ba3181 )
Cybereasonmalicious.6e518c
BaiduWin32.Trojan.Agent.aqw
SymantecTrojan.Gen.2
ESET-NOD32Win32/Agent.QEZ
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyTrojan.Win32.Agent.exrw
BitDefenderTrojan.Agent.BCOT
NANO-AntivirusTrojan.Win32.Hooker.ezatyh
MicroWorld-eScanTrojan.Agent.BCOT
TencentWin32.Trojan.Agent.Wnms
Ad-AwareTrojan.Agent.BCOT
ComodoMalware@#qksa7v3k5t3d
BitDefenderThetaGen:NN.ZedlaF.34266.Wz9@aOy2zsbj
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.Agent.BCOT
EmsisoftTrojan.Agent.BCOT (B)
AviraTR/Agent.vzpbi
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.Agent.BCOT
McAfeeArtemis!628E2006E518
MAXmalware (ai score=97)
VBA32Trojan.BHORA.01284
MalwarebytesMalware.AI.802604168
PandaTrj/CI.A
IkarusTrojan.Win32.Agent
FortinetW32/Agent.EXRW!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.802604168?

Malware.AI.802604168 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment