Malware

Malware.AI.2639349671 removal

Malware Removal

The Malware.AI.2639349671 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2639349671 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Creates an autorun.inf file
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Malware.AI.2639349671?


File Info:

name: A70C3B8546DE12DCE290.mlw
path: /opt/CAPEv2/storage/binaries/f9e44ae6dbbdedcaace0f91f027cdc5283b32e69d37c87fdd59ae7d040896c16
crc32: 8E3F02ED
md5: a70c3b8546de12dce290891274128690
sha1: d026f8d7c0d77a09b1d010cf4d5a0bbf87ebdb9d
sha256: f9e44ae6dbbdedcaace0f91f027cdc5283b32e69d37c87fdd59ae7d040896c16
sha512: f4668cdad66d38735011873b055dbc510c4c7e5c565d2f90f524990af836f674ef35690dbbbc6877e1b444e1dc251726f0fa79b62336081e52832f7ebe3ec643
ssdeep: 3072:O4CwuPp9ezLjAroTErU9EUG6iuWC0XJTpHmwK7z6bThXwqVB/JBNX4Fo5NxAy:QdxBrBU1iuWC0XJZm76BXwSRBZUKxAy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T166049EE28657A4CCF752077D7D04D31648928D67E2A157C4B8F11F8C83A282F8A6BF5E
sha3_384: 0952fd1679f892d3fe8d4e47604a4f2d8212fd026450ead15ba5ced6b0175923beec503d394f15fa708e16d414c779a2
ep_bytes: 6a40680010000068a08601006a00ff15
timestamp: 2012-09-05 20:26:28

Version Info:

0: [No Data]

Malware.AI.2639349671 also known as:

BkavW32.AIDetect.malware1
LionicWorm.Win32.AutoRun.o!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Downloader.126
FireEyeGeneric.mg.a70c3b8546de12dc
ALYacGen:Variant.Downloader.126
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaWorm:Win32/AutoRun.cc88eeaf
K7GWEmailWorm ( 0052ca6a1 )
K7AntiVirusEmailWorm ( 0052ca6a1 )
BitDefenderThetaAI:Packer.10D9AA541E
CyrenW32/Kryptik.AJG.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/AutoRun.Agent.AFG
TrendMicro-HouseCallTROJ_GEN.R002C0RL321
Paloaltogeneric.ml
KasperskyHEUR:Worm.Win32.AutoRun.pef
BitDefenderGen:Variant.Downloader.126
AvastFileRepMalware
TencentWin32.Worm.Autorun.Lkdo
Ad-AwareGen:Variant.Downloader.126
EmsisoftGen:Variant.Downloader.126 (B)
ComodoEmailWorm.Win32.AutoRun.KA@719dtc
DrWebWin32.HLLW.Autoruner3.499
TrendMicroTROJ_GEN.R002C0RL321
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
SophosMal/Generic-R + Troj/Agent-BCGS
APEXMalicious
GDataWin32.Trojan.PSE.1707KHL
JiangminTrojan.Generic.fwvfq
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan/Generic.ASBOL.C6BE
ArcabitTrojan.Downloader.126
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R295338
Acronissuspicious
McAfeeGenericRXAA-AA!A70C3B8546DE
VBA32BScope.Worm.Autorun
MalwarebytesMalware.AI.2639349671
IkarusWorm.Win32.AutoRun
RisingWorm.Autorun!1.AFBF (CLASSIC)
YandexTrojan.GenAsa!6D0EeHKQIts
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Agent.AFG!tr
AVGFileRepMalware
Cybereasonmalicious.546de1
PandaTrj/Genetic.gen
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.2639349671?

Malware.AI.2639349671 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment