Malware

Malware.AI.3022231202 removal tips

Malware Removal

The Malware.AI.3022231202 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3022231202 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3022231202?


File Info:

name: 15D7F5DC3377D66C0158.mlw
path: /opt/CAPEv2/storage/binaries/5c405b62769d944147745277bf720c983eb7c7276a763b0be46da91da5dea698
crc32: 6F834A7A
md5: 15d7f5dc3377d66c01588c8dd6b2bbf8
sha1: b70c3d69d23981c4c67a844aaa42dc5375ca0dab
sha256: 5c405b62769d944147745277bf720c983eb7c7276a763b0be46da91da5dea698
sha512: e69bac1afe48c2ea785a832eb61e2dc91128dcc40fb21216acdc6f5d2f65dea5a6ea15eabdf75c1772c410f40cf2d0a0c0ba8c487e6691dc8e4deda62040f598
ssdeep: 6144:GLCJcGFM0whctO8pwVlt4HOlMF7Xa8zeF:GLCJBOv2+Vlt46Mjz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13234CF52A3F89958F5F37B706D724A841E36FC62EC70E66D2220B55F28B5A48C870773
sha3_384: 6abbec72724cf43ff278a02fc57f775d6f190d1ee47abbd90255fbe6849e8d5b8a13d7780318b871423cd823bcdc434d
ep_bytes: 60be003045008dbe00e0faffc787d064
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Malware.AI.3022231202 also known as:

DrWebTrojan.PWS.Qqpass
MicroWorld-eScanGeneric.Dacic.E1F05845.A.F684302C
CAT-QuickHealTrojan.QqpassIH.S27768612
McAfeePWS-QQPass
MalwarebytesMalware.AI.3022231202
VIPREGeneric.Dacic.E1F05845.A.F684302C
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 7000000f1 )
K7GWTrojan ( 7000000f1 )
CrowdStrikewin/malicious_confidence_90% (D)
BitDefenderThetaAI:Packer.52CF99C921
VirITTrojan.Win32.Generic.ESM
CyrenW32/QQPass.LUQH-3970
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Fasong.J
APEXMalicious
ClamAVWin.Trojan.Qqpass-239
KasperskyTrojan-PSW.Win32.QQPass.7003
BitDefenderGeneric.Dacic.E1F05845.A.F684302C
NANO-AntivirusTrojan.Win32.QQPass.focoup
ViRobotTrojan.Win32.A.PSW-QQPass.231996[UPX]
AvastWin32:Malware-gen
TencentTrojan.Win32.Scar.16000123
EmsisoftGeneric.Dacic.E1F05845.A.F684302C (B)
F-SecureTrojan.TR/ATRAPS.Gen
BaiduWin32.Trojan-PSW.OLGames.bm
ZillyaTrojan.QQPass.Win32.2211
McAfee-GW-EditionPWS-QQPass
FireEyeGeneric.mg.15d7f5dc3377d66c
SophosTroj/PWS-BUY
SentinelOneStatic AI – Suspicious PE
GDataGeneric.Dacic.E1F05845.A.F684302C
JiangminTrojan/PaPa.13
GoogleDetected
AviraTR/ATRAPS.Gen
MAXmalware (ai score=81)
Antiy-AVLTrojan[PSW]/Win32.QQPass
XcitiumTrojWare.Win32.PSW.QQPass.~ZE@k4r35
ArcabitGeneric.Dacic.E1F05845.A.F684302C
SUPERAntiSpywareTrojan.Agent/Gen-Lmir
ZoneAlarmTrojan-PSW.Win32.QQPass.7003
MicrosoftPWS:Win32/QQpass.7003
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.QQPass.C144362
VBA32TrojanPSW.QQpass
ALYacGeneric.Dacic.E1F05845.A.F684302C
Cylanceunsafe
PandaTrj/Genetic.gen
RisingWorm.Fasong!1.D14C (CLASSIC)
YandexTrojan.GenAsa!sFtAi0jR1wg
IkarusTrojan-GameThief.Win32.Lmir
MaxSecureTrojan.Malware.965750.susgen
FortinetW32/Delf.FT!tr
AVGWin32:Malware-gen
Cybereasonmalicious.c3377d
DeepInstinctMALICIOUS

How to remove Malware.AI.3022231202?

Malware.AI.3022231202 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment