Malware

Malware.AI.2734356640 removal guide

Malware Removal

The Malware.AI.2734356640 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2734356640 virus can do?

  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Harvests cookies for information gathering

How to determine Malware.AI.2734356640?


File Info:

name: E31ACDD3BF5301C7DAA8.mlw
path: /opt/CAPEv2/storage/binaries/8c9dea8a8a456433dfa5ced7468cbab7bcd039a12c5826e7592555a5bc1f68de
crc32: 211E449D
md5: e31acdd3bf5301c7daa84023f04bb03b
sha1: 0c841ee21bcdae3076268809402e4da30f309e49
sha256: 8c9dea8a8a456433dfa5ced7468cbab7bcd039a12c5826e7592555a5bc1f68de
sha512: 4fda0e0b8a25909007fc8e15ab1de28e53b4f9e45243bbf92335fb4afdc3c05a865a1e685cd3456a10005d637f18d38ae815d0eed197e868540592b9b096339e
ssdeep: 12288:mhUrE1gOYRETI5VrlsYHpTExxyPtcxLHX8NajLoJBV1Ls2LMpB8a/:RE1kRETIblZTExxatc5HpLoJBV1Ls2wl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8E4DF93B19590BCD5D31671026EB2A6EA34630E0338EED373951BF1AA38DD69D30F85
sha3_384: 2eae2b7bcb1e0cf679ebf1673311faffc62772daa9bc9af23d61bff7e414b8868fec93f5c52d0c5dec122cf80cc5ea37
ep_bytes: 688807000068000000006888214900e8
timestamp: 2014-12-31 14:51:15

Version Info:

CompanyName: CheatHappens
ProductName: Dark Souls Trainer
ProductVersion: 19041
FileVersion: 1.0003
Translation: 0x0000 0x04b0

Malware.AI.2734356640 also known as:

BkavW32.AIDetect.malware1
LionicRiskware.Win32.Game.1!c
MicroWorld-eScanTrojan.GenericKD.48270529
FireEyeGeneric.mg.e31acdd3bf5301c7
CAT-QuickHealHactool.Gamehuck.A5
McAfeeRDN/Generic PUP.z
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 004b8c2c1 )
K7GWUnwanted-Program ( 004b8c2c1 )
Cybereasonmalicious.21bcda
VirITTrojan.Win32.DownLoader11.EWA
CyrenW32/GameHack.E.gen!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/GameHack.BE potentially unsafe
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Gamemodding-9882819-1
BitDefenderTrojan.GenericKD.48270529
NANO-AntivirusTrojan.Win32.GameHuck.dqltpz
SUPERAntiSpywareHack.Tool/Gen-GameHack
AvastWin32:GenMalicious-JVJ [PUP]
Ad-AwareTrojan.GenericKD.48270529
SophosCheathappens (PUA)
ComodoTrojWare.Win32.GameHack.DC@5qhv2d
DrWebTrojan.DownLoader11.3276
VIPRETrojan.Win32.Gamehack.be (v)
TrendMicroTROJ_GEN.R002C0OB322
McAfee-GW-EditionBehavesLike.Win32.Injector.jc
EmsisoftTrojan.GenericKD.48270529 (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Riskware.GameHack.E
JiangminHackTool.MSIL.ald
Antiy-AVLTrojan/Generic.ASMalwS.F9E26D
GridinsoftRansom.Win32.Zbot.sa
MicrosoftTrojan:Win32/Ymacco.AB8C
CynetMalicious (score: 100)
AhnLab-V3HackTool/Win32.Cheathappens.R123623
Acronissuspicious
ALYacTrojan.GenericKD.48270529
MAXmalware (ai score=89)
VBA32BScope.Trojan.Downloader
MalwarebytesMalware.AI.2734356640
TrendMicro-HouseCallTROJ_GEN.R002C0OB322
RisingPUF.GameHack!1.B335 (CLOUD)
YandexRiskware.Agent!+DvaRFCzJks
IkarusHackTool.MSIL.GameHuck
MaxSecureTrojan.Gamehack.be
FortinetW32/Siggen.ACEA!tr
AVGWin32:GenMalicious-JVJ [PUP]
CrowdStrikewin/grayware_confidence_100% (D)

How to remove Malware.AI.2734356640?

Malware.AI.2734356640 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment