Malware

How to remove “Malware.AI.3053515240”?

Malware Removal

The Malware.AI.3053515240 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3053515240 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.3053515240?


File Info:

name: 4CBBCAE46D1A97ECEB5B.mlw
path: /opt/CAPEv2/storage/binaries/6bdacf4b0fec8e669b6b10fe74eeed44808cdb31044c05d59402d2ff43d9757f
crc32: 72A5DFBB
md5: 4cbbcae46d1a97eceb5bbae1c442838c
sha1: e4bc715c9f2c4d7447326ae9f8233d4491824fa1
sha256: 6bdacf4b0fec8e669b6b10fe74eeed44808cdb31044c05d59402d2ff43d9757f
sha512: 690dfe42323a55e59f6c2240a7dda9e64470168b143aa66a2727b17531179f59f67b8c61063432ebb5414dd9d2b4b08d9ae81b51efadfefbba19805bc0db106f
ssdeep: 3072:5f3I7DNWTdNgSnVuuNY/cqrS+mBae0wGm24GMrXq:5f3YoTxnkm4cq2r3X2oq
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T156C36C57B3A034F9E063CB7889A10B18DB72B57106B0DB5F43A445A64F773D18E2AB32
sha3_384: a6994ccd355503b941c48b5f0be469bf1b47df4cf6c8677d0d37e5c37b53c4a92320d39047fbb4742dcccf37b6709c2b
ep_bytes: 4883ec28e8c73000004883c428e936fe
timestamp: 2016-02-11 00:25:25

Version Info:

Comments:
LegalCopyright: License: MPL 2
CompanyName: Mozilla Foundation
FileDescription:
FileVersion: 44.0.2
ProductVersion: 44.0.2
InternalName:
LegalTrademarks: Mozilla
OriginalFilename: wow_helper.exe
ProductName: Firefox
BuildID: 20160210153822
Translation: 0x0000 0x04b0

Malware.AI.3053515240 also known as:

LionicTrojan.Win32.Graftor.4!c
MicroWorld-eScanGen:Variant.Graftor.643745
FireEyeGen:Variant.Graftor.643745
McAfeeArtemis!4CBBCAE46D1A
AlibabaTrojan:Win32/OnLineGames.8bb129ba
Cybereasonmalicious.46d1a9
CyrenW32/S-91932004!Eldorado
BitDefenderGen:Variant.Graftor.643745
AvastWin64:Malware-gen
RisingTrojan.Kryptik!1.B3E8 (CLASSIC)
DrWebTrojan.BtcMine.1759
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Variant.Graftor.643745 (B)
GDataGen:Variant.Graftor.643745
AviraHEUR/AGEN.1141404
ArcabitTrojan.Graftor.D9D2A1
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
ALYacGen:Variant.Graftor.643745
MAXmalware (ai score=85)
MalwarebytesMalware.AI.3053515240
IkarusVirus.Win32.OnLineGames.BFT
FortinetW32/Ipamor.858F!tr
AVGWin64:Malware-gen

How to remove Malware.AI.3053515240?

Malware.AI.3053515240 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment