About “Malware.AI.902218538” infection

The Malware.AI.902218538 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.902218538 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.902218538?


File Info:
name: 131A00DBE5329A32158C.mlw
path: /opt/CAPEv2/storage/binaries/c6f3e9828003827b5747f7dc5d40a64c8f205dcfc764b7d35e9b2b7e2e95ddae
crc32: 255C8FE6
md5: 131a00dbe5329a32158cb3a99961de34
sha1: 13b30e527625f6373ea96946c71bcf010e46b991
sha256: c6f3e9828003827b5747f7dc5d40a64c8f205dcfc764b7d35e9b2b7e2e95ddae
sha512: ae94e402513da073ed1888f9b42289875576c6a7321a684711238906c2d0e9009a50645dcc8a5569e33607da8fa52f594b633d480359e406304b8e0dba09d18d
ssdeep: 24576:5Q3ZZxDeSBv7v1yZqYWmQGUUMUfUUUUUNUUUUUUUUmtTDZGPLvRC/eZfiNbp:5AkzUUMUfUUUUUNUUUUUUUUmtTD8Cm58
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6258D31B291D537D0B31ABC9D4BD6E46429BE146E34A88B3BE40F4C6F35A823C35697
sha3_384: 179690d5af5286f19bf81b477354301e3eb19cade93f2870191681ea4424177bd354748899c1d52bf862a2e8a42508b4
ep_bytes: 8bec609ce9bf0e0200b8cc534c00e8f1
timestamp: 2008-09-02 02:03:49

Version Info:
CompanyName: kota
FileDescription: 
FileVersion: 4.2.2.2230
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
SpecialBuild: 
PrivateBuild: 
Translation: 0x0804 0x03a8

Malware.AI.902218538 also known as:

Bkav	W32.AIDetect.malware2
Cylance	Unsafe
Cybereason	malicious.27625f
Cyren	W32/Risk.YQIT-8408
Elastic	malicious (moderate confidence)
APEX	Malicious
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Comodo	TrojWare.Win32.PkdMorphine.~AN@1l4q0o
FireEye	Generic.mg.131a00dbe5329a32
Ikarus	Trojan.ATRAPS
Jiangmin	Trojan/Genome.arai
Google	Detected
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	Trojan.Click
Malwarebytes	Malware.AI.902218538
Rising	Backdoor.Hupigon!8.B57 (TFE:3:9ZR3ES2hAvB)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.GCTV!tr
BitDefenderTheta	Gen:NN.ZelphiF.34796.!K0@au5pgElj
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Malware.AI.902218538?

Malware.AI.902218538 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X