Malware

Should I remove “Malware.AI.3056336558”?

Malware Removal

The Malware.AI.3056336558 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3056336558 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3056336558?


File Info:

name: 033C3B2CC8A40E2ABE1C.mlw
path: /opt/CAPEv2/storage/binaries/990ed97c65a176223902bbb9de9a99b89a13de609f56da7c5c28a7fe98ac5818
crc32: D4A83437
md5: 033c3b2cc8a40e2abe1c2ed617c2e64b
sha1: 287e4cb61d2addcc274e8ef6f9a0a7e874318f4c
sha256: 990ed97c65a176223902bbb9de9a99b89a13de609f56da7c5c28a7fe98ac5818
sha512: 3c6cdd54ba6ada14b30c4dc7764eabb2872ac1bdc89a0b764d24d723300a5b175f31e534acadff97e1554a6f3e7051df6eea4a7c37ec990d6beb12e00dbc06fa
ssdeep: 6144:UZJQah5PabueGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGYzx1pHS+x+shdfx:yWuzXSshdffDEmKxzq5Kw6G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE54E0467914B127DC331B731ED8A2677F00B13D687A554E8304EE9BF89D26EBE086D1
sha3_384: 2cdd3d14de5870bcfd97382ffb209d75196c1efaa607c3ff2a5c2cc6d071e66a5f37020a5add59e1f66cd1274c9d6565
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2016-12-11 09:15:24

Version Info:

CompanyName: Tim Kosse
FileDescription: FileZilla FTP Client
FileVersion: 3.40.0
LegalCopyright: Tim Kosse
OriginalFilename: FileZilla_3.40.0_win32-setup.exe
ProductName: FileZilla
ProductVersion: 3.40.0
Translation: 0x0409 0x04b0

Malware.AI.3056336558 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Doina.63293
FireEyeGen:Variant.Doina.63293
ALYacGen:Variant.Doina.63293
MalwarebytesMalware.AI.3056336558
VIPREGen:Variant.Doina.63293
APEXMalicious
BitDefenderGen:Variant.Doina.63293
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Goblino [Inf]
EmsisoftGen:Variant.Doina.63293 (B)
Trapminesuspicious.low.ml.score
GDataGen:Variant.Doina.63293
MAXmalware (ai score=87)
XcitiumMalCrypt.Indus!@1qrzi1
ArcabitTrojan.Doina.DF73D
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Malware/Win.Generic.C5482947
RisingTrojan.Generic@AI.90 (RDML:v6n5i4j8/TNbeWXvxYBFEg)
FortinetAdware/Adware_AGen
AVGWin32:Goblino [Inf]
CrowdStrikewin/malicious_confidence_60% (D)

How to remove Malware.AI.3056336558?

Malware.AI.3056336558 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment