Malware.AI.3491998348 removal tips

The Malware.AI.3491998348 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3491998348 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.3491998348?


File Info:
name: 64CC0EAE3C5D8F130766.mlw
path: /opt/CAPEv2/storage/binaries/80e934ab8cc53bcc87cc9ce2b655aed09d635a56b72bab7eaaa0f02d2a749ba7
crc32: AA19F01E
md5: 64cc0eae3c5d8f1307663f2c56754b6e
sha1: 5dd904d2d61ed61aa2afa30032e02c28b4a1b6af
sha256: 80e934ab8cc53bcc87cc9ce2b655aed09d635a56b72bab7eaaa0f02d2a749ba7
sha512: 5ec40222a377f23b6d18b585ab7c36f5eeab1614f079fd927f3877ed91926b5c100d493292fe06c0a13baabaeceb8683ac7c6420cc8ee36b088e557ceaa5bd35
ssdeep: 1536:FsRP9nWFIBTocDRC7fYseInWlibmc4s0wPh71U+Y9wlVUV/DOKtYZk9D2pATDvgI:Gl9nJxRC7S8owPM+YHVrOSxXzt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T164E35413A221D891E15567F663BA423835BC87D1A8F0CF13EFF4CCB1ADB6522875A90D
sha3_384: d590c3026e51c4d1e41b65fdb321a50376baf56b5cc681239b7d69de2ec376c433aeb49179498facef7124ba4a8b7fdf
ep_bytes: e81b710400e80a57040033c0c3909090
timestamp: 2015-06-03 12:11:42

Version Info:
0: [No Data]

Malware.AI.3491998348 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader13.34550
MicroWorld-eScan	Gen:Variant.Kazy.21167
FireEye	Generic.mg.64cc0eae3c5d8f13
McAfee	Artemis!64CC0EAE3C5D
Zillya	Trojan.Scar.Win32.99664
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/S-4dc2b057!Eldorado
Symantec	Trojan.Gen.MBT
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Scar.ocqs
BitDefender	Gen:Variant.Kazy.21167
Ad-Aware	Gen:Variant.Kazy.21167
Emsisoft	Gen:Variant.Kazy.21167 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
Sophos	Generic ML PUA (PUA)
GData	Win32.Trojan.PSE.18PVCNI
Jiangmin	Trojan/PSW.QQPass.rgy
Antiy-AVL	Trojan/Generic.ASBOL.C4EC
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Acronis	suspicious
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3491998348
APEX	Malicious
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazofOxwSr+FjyZH6qGud9r6s)
SentinelOne	Static AI – Malicious PE
MaxSecure	CORRUPT:Trojan.Gofot.ges
Fortinet	W32/PossibleThreat
Cybereason	malicious.e3c5d8

How to remove Malware.AI.3491998348?

Malware.AI.3491998348 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X