About “Malware.AI.2115160814” infection

The Malware.AI.2115160814 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2115160814 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Creates an autorun.inf file
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Anomalous binary characteristics

How to determine Malware.AI.2115160814?

File Info:
name: 351A82F228FB2FE2A3F7.mlw
path: /opt/CAPEv2/storage/binaries/36e5182f7e5e3d8bb1ee2ada10c38494aaa9782f8099e3fd3d6bbf32a53a336e
crc32: 473EFB1D
md5: 351a82f228fb2fe2a3f7a55ecae07354
sha1: c7562e72ad618be71467ab2c8a012a900f18b378
sha256: 36e5182f7e5e3d8bb1ee2ada10c38494aaa9782f8099e3fd3d6bbf32a53a336e
sha512: d7f7368b7d230e14f64761a57543008d95598a0b0a2fd3a7d3cb893c011046eafd86582a262634c8b8f43bca1ba2077425732dbac1edf1428ca8245a339ba9cb
ssdeep: 3072:gC/9K1SQ7VNww/nMFtsyE17O1BUp4Y5FsCf9uRJLo/uKnqouZK//wl098tOtjfCf:/CNww/otsyEygWCFuLRK1//wltOlw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C3049DE2966760CCF21202BD7D00C7035C969D67E2E597D078B11F8C83A152F9A6BF5E
sha3_384: d58fbc3047d6de3db42ffb4e9610e32066899b78681bfe98342813416b0bf4dc63ffcf6b9e44aa288c3b8a2f5f7e695c
ep_bytes: 6a40680010000068a08601006a00ff15
timestamp: 2012-09-05 20:26:28

Version Info:
0: [No Data]

Malware.AI.2115160814 also known as:

How to remove Malware.AI.2115160814?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.