Malware

Malware.AI.3040336410 removal guide

Malware Removal

The Malware.AI.3040336410 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3040336410 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Creates an excessive number of UDP connection attempts to external IP addresses
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify desktop wallpaper
  • Executed a process and injected code into it, probably while unpacking
  • Exhibits behavior characteristic of Cerber ransomware
  • Attempts to execute a binary from a dead or sinkholed URL
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • EternalBlue behavior
  • Attempts to access Bitcoin/ALTCoin wallets
  • Generates some ICMP traffic
  • Collects information to fingerprint the system

How to determine Malware.AI.3040336410?


File Info:

crc32: E09B29DA
md5: be4113beb51b27e8319ebde069935f5f
name: BE4113BEB51B27E8319EBDE069935F5F.mlw
sha1: caf55e4580a85eeb1187ce8c6d2286c977be16cf
sha256: 1e50a10bb85bc3923b3c39c86597b7bdd4ee2c2948b8d510b0793deb3e9a24a6
sha512: d3fe7d010b168f463b60ef45863a4ccacd615d90d2b7e0a2b1146f820d95133d7880973547395df03218b763d3535019e60a4797ab8dce5ffa2d03bca32e9459
ssdeep: 6144:+y1I8Zz8AlT7R+zoShwe9ls1bHdcd4J1y+TxpqBmVGIt45KZVSs:+yGwreoSh19mJOmQNjs
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Malware.AI.3040336410 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.Cerber.KU
FireEyeGeneric.mg.be4113beb51b27e8
CAT-QuickHealTrojanRansom.Zerber
Qihoo-360Win32/Ransom.Cerber.HxIBQI8A
ALYacTrojan.Ransom.Cerber.KU
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderTrojan.Ransom.Cerber.KU
K7GWTrojan ( 00507e701 )
K7AntiVirusTrojan ( 00507e701 )
BitDefenderThetaGen:NN.ZexaF.34590.tmJfaOzI6efm
CyrenW32/S-00a0c8e0!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Cerber-9779304-0
KasperskyHEUR:Trojan-Ransom.Win32.Zerber.gen
AlibabaRansom:Win32/Cerber.5b4970b1
NANO-AntivirusTrojan.Win32.Zerber.icbenx
RisingRansom.Cerber!8.3058 (CLOUD)
Ad-AwareTrojan.Ransom.Cerber.KU
EmsisoftTrojan.Ransom.Cerber.KU (B)
ComodoMalware@#2n8c1p0gnj8k
F-SecureHeuristic.HEUR/AGEN.1127103
DrWebTrojan.PWS.Panda.11620
ZillyaTrojan.Inject.Win32.222739
TrendMicroRansom_CERBER.F117CA
McAfee-GW-EditionBehavesLike.Win32.RansomGandCrab.fc
SophosMal/Cerber-V
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Inject.yfd
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1127103
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.Inject
KingsoftWin32.Troj.Inject.(kcloud)
MicrosoftRansom:Win32/Cerber
ArcabitTrojan.Ransom.Cerber.KU
ZoneAlarmHEUR:Trojan-Ransom.Win32.Zerber.gen
GDataTrojan.Ransom.Cerber.KU
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Cerber.C1833175
McAfeeGeneric.axt
VBA32TrojanRansom.Zerber
MalwarebytesMalware.AI.3040336410
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.DMXF
TrendMicro-HouseCallRansom_CERBER.F117CA
TencentMalware.Win32.Gencirc.10bb75d2
YandexTrojan.GenAsa!s+gQCv9JXW0
IkarusTrojan.Win32.Injector
FortinetW32/Injector.DMCL!tr
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml

How to remove Malware.AI.3040336410?

Malware.AI.3040336410 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment