Malware

Malware.AI.2479362322 removal instruction

Malware Removal

The Malware.AI.2479362322 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2479362322 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Attempts to disable Windows Auto Updates
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.2479362322?


File Info:

name: 8A39F0BD37AADB6D594F.mlw
path: /opt/CAPEv2/storage/binaries/033d66b1de0d97a9c02e8230a10b1b802006a54e345603ef1211dd7aa555ff08
crc32: 7B3E1D40
md5: 8a39f0bd37aadb6d594f9aa4e299b362
sha1: 44af719c647dbf5f73ed9f06f1f5de721d8623d6
sha256: 033d66b1de0d97a9c02e8230a10b1b802006a54e345603ef1211dd7aa555ff08
sha512: 66601c9b3173d0b9c0ed2d492cb746f5c803614be1d04ac48ca6255da7dec1c314c2de0801c7ada6349acb4780c15bc8ad673254e8b2719a27a9b3582835e83c
ssdeep: 1536:xCDuxKPWt3obKTa0G+UAqn2z3HldglfL3wi65IWS9qlmAhji6e:MDMKOtgKMplAVelfTWI6lmAFi6e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T144E3D83F3B8594C2E654257036FAC3D62ABF784A5F07414FA6047B1B28F2E642D2DA53
sha3_384: 0ed566d277e42e3153196f589d3becdc1911b979b02cb7a79450ec93e50b06478cf989f205c962e13ef09ada12590424
ep_bytes: 6808134000e8eeffffff000058000000
timestamp: 2012-08-08 21:28:37

Version Info:

Translation: 0x0409 0x04b0
Comments: smemorate
CompanyName: smemorate
FileDescription: smemorate
LegalCopyright: smemorate
LegalTrademarks: smemorate
ProductName: smemorate
FileVersion: 8.53
ProductVersion: 8.53
InternalName: pterography
OriginalFilename: pterography.exe

Malware.AI.2479362322 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
DrWebTrojan.DownLoader6.42938
MicroWorld-eScanGen:Heur.VB.Agent.3
FireEyeGeneric.mg.8a39f0bd37aadb6d
CAT-QuickHealTrojan.JorikMF.S28717795
McAfeeGenDownloader.rv
MalwarebytesMalware.AI.2479362322
VIPREGen:Heur.VB.Agent.3
SangforSuspicious.Win32.Save.a
K7AntiVirusEmailWorm ( 003c363a1 )
K7GWP2PWorm ( 003cefdc1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.70117C5120
VirITTrojan.Win32.Cryptor.GL
CyrenW32/Vobfus.AQ.gen!Eldorado
SymantecW32.Changeup!gen20
Elasticmalicious (high confidence)
ESET-NOD32Win32/AutoRun.VB.AYD
APEXMalicious
ClamAVWin.Malware.Vobfus-6836774-0
KasperskyTrojan.Win32.Jorik.Vobfus.fcdq
BitDefenderGen:Heur.VB.Agent.3
NANO-AntivirusTrojan.Win32.Jorik.cnwrpf
SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
AvastWin32:VBCrypt-BJA [Trj]
TencentWorm.Win32.Vobfus.q
TACHYONTrojan/W32.VB-Jorik.147456.F
SophosMal/Kovter-W
F-SecureTrojan.TR/Dropper.VB.Gen5
BaiduWin32.Worm.VB.nu
TrendMicroWORM_VOBFUS.SM01
McAfee-GW-EditionBehavesLike.Win32.VBObfus.cm
Trapminemalicious.high.ml.score
EmsisoftGen:Heur.VB.Agent.3 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Heur.VB.Agent.3
JiangminTrojan/Jorik.hwao
WebrootTrojan.Win32.Diple
GoogleDetected
AviraTR/Dropper.VB.Gen5
Antiy-AVLWorm/Win32.WBNA.gen
XcitiumWorm.Win32.Pronny.ABQ@4puwz1
ArcabitTrojan.VB.Agent.3
ViRobotTrojan.Win32.Vobfus.147456
ZoneAlarmTrojan.Win32.Jorik.Vobfus.fcdq
MicrosoftWorm:Win32/Vobfus.GP
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Jorik.R42854
VBA32Trojan.Vobfus
ALYacGen:Heur.VB.Agent.3
MAXmalware (ai score=82)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallWORM_VOBFUS.SM01
RisingWorm.VobfusEx!1.99DB (CLASSIC)
YandexTrojan.GenAsa!x8MiIhonRUk
IkarusWorm.Win32.Vobfus
MaxSecureTrojan.Malware.4362996.susgen
FortinetW32/VBObfus.AU!tr
AVGWin32:VBCrypt-BJA [Trj]
Cybereasonmalicious.d37aad
DeepInstinctMALICIOUS

How to remove Malware.AI.2479362322?

Malware.AI.2479362322 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment