What is “Malware.AI.3057975374”?

The Malware.AI.3057975374 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3057975374 virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3057975374?


File Info:
name: E861B842662EC7206367.mlw
path: /opt/CAPEv2/storage/binaries/928235026c9ab4748f7f380bcf0e0e425488b5b97d9b692df05b3a44d2e36223
crc32: EF9378DB
md5: e861b842662ec7206367f8421eb7756c
sha1: 9af49abc70c1d87a5516345211e72bd5887fcf11
sha256: 928235026c9ab4748f7f380bcf0e0e425488b5b97d9b692df05b3a44d2e36223
sha512: c1e287229bd0ebbc49ab12b198dd471e517d7bfdd1d829414d27c4aded22e59f35008ada1c05d31125bb32718b225030149d3ee72be180a0f98c43126d92e501
ssdeep: 12288:Be7tkNdiu5Fx/DxV7rD0KImt0LDTdB3Iwi8C+lPYYM89FF96X0JxQFFsbDMS4:BeZyxzfadB3Iwc+lPYY59FF96X0JxQx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A85811DEE508EB9D9620930C965973D52286D208B13ADC7A2987ECDFBF0FC16537632
sha3_384: 07f2eee419c73f4def4f43f1732a390b6f9204e0e8f5ac785e75878afcd062cc802671317494535e751df2438e3fabfe
ep_bytes: e82efcffffe935fdffff558bec81ec28
timestamp: 2006-10-27 02:52:04

Version Info:
CompanyName: Microsoft Corporation
FileDescription: 2007 Microsoft Office component
FileVersion: 12.0.4518.1014
InternalName: smarttaginstall
LegalCopyright: © 2006 Microsoft Corporation.  All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: SmartTagInstall.exe
ProductName: 2007 Microsoft Office system
ProductVersion: 12.0.4518.1014
Translation: 0x0000 0x04e4

Malware.AI.3057975374 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.e861b842662ec720
Malwarebytes	Malware.AI.3057975374
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Cyren	W32/Ipamor.BA.gen!Eldorado
tehtris	Generic.Malware
APEX	Malicious
ClamAV	Win.Malware.Filerepmalware-9871423-0
Avast	Win32:Malware-gen
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1249066
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!E861B842662E
VBA32	Trojan.Sabsik
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.B90E!tr
AVG	Win32:Malware-gen

How to remove Malware.AI.3057975374?

Malware.AI.3057975374 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X