Malware

About “Malware.AI.3100159189” infection

Malware Removal

The Malware.AI.3100159189 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3100159189 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.3100159189?


File Info:

name: B1135BBB6995B36541CC.mlw
path: /opt/CAPEv2/storage/binaries/d30c772254a90af60690583a0d334b73f50fdf8396d83b0ae12aa4677c763cbb
crc32: 9DCAA3A2
md5: b1135bbb6995b36541ccbe423cc5795b
sha1: 2556712dbb706429b12ea152c3cb21cb6c7dffd7
sha256: d30c772254a90af60690583a0d334b73f50fdf8396d83b0ae12aa4677c763cbb
sha512: 656c08d69933a1c0b758b0db4d9e5c3985e26a691909ae00359c7922494bd55aade771b903e1c0f99989dd6d5d1735daea6ae11af32bad2acad3310f4ea1bda2
ssdeep: 384:w9qeqNuQxwxYb50UAIjpWMxEiQQq7TkJ/ct1W+9j+CP0MnWZXzauU3iRhfFhtswM:+qZ50/3kJEtFamPWZDX1RbLfk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T135F27D457B54925AF2A70BB029B7AB344B7ABCB43A345E3BC5D039D92F7132479003A3
sha3_384: 3c92ed092cc0d4b71ac59b92ec4122d722ce81a50120acff2dfa08a49e0180fb482d6c3aba269930b6fe5faafaafd6f1
ep_bytes: 9c60685374416c685468496ee8000000
timestamp: 2006-11-05 00:32:27

Version Info:

0: [No Data]

Malware.AI.3100159189 also known as:

BkavW32.AIDetect.malware2
McAfeeArtemis!B1135BBB6995
CylanceUnsafe
ZillyaTrojan.Genome.Win32.131162
CrowdStrikewin/malicious_confidence_90% (W)
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
VirITTrojan.Win32.MulDrop2.BHGW
CyrenW32/Trojan.HQSI-0977
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
ClamAVWin.Trojan.IRCBot-3618
NANO-AntivirusTrojan.Win32.Gendal.dhdtx
SUPERAntiSpywareTrojan.Agent/Generic
SophosML/PE-A
ComodoMalware@#1nb9dk3arxz78
McAfee-GW-EditionBehavesLike.Win32.Infected.nm
FireEyeGeneric.mg.b1135bbb6995b365
GoogleDetected
KingsoftWin32.Heur.KVMH008.a.(kcloud)
MicrosoftTrojan:Script/Phonzy.A!ml
CynetMalicious (score: 100)
MalwarebytesMalware.AI.3100159189
RisingTrojan.Occamy!8.F1CD (RDMK:cmRtazqd8mtMLIAWtUej+Gupms7O)
YandexTrojan.Agent!t2Up53uxR2w
SentinelOneStatic AI – Suspicious PE
FortinetW32/Dx.TYW!tr
PandaTrj/KillAV.FJ

How to remove Malware.AI.3100159189?

Malware.AI.3100159189 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment