Categories: Malware

Malware.AI.3101284321 removal tips

The Malware.AI.3101284321 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3101284321 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

How to determine Malware.AI.3101284321?


File Info:
name: 922E305ED70779AD8823.mlwpath: /opt/CAPEv2/storage/binaries/c225ea7219a56e15d4459db4f168bd7d127f69f76d36dc11a830f9d0ac2982eacrc32: 3861702Cmd5: 922e305ed70779ad8823432b5a53eecesha1: 7edba49959845bb05d42f7a2d624db3f2afba92bsha256: c225ea7219a56e15d4459db4f168bd7d127f69f76d36dc11a830f9d0ac2982easha512: 0e0e851fa70b23a069aa45d4d353ababfdbcc3397eca69fecfbe9d9cf89c0a7415334b5c0ca42b74acab9a4199db94247c7b32028322b89c3fcf36c8c4ed7592ssdeep: 6144:SueHyfsydvTZpfIKbrvkfHljDLuEFRgxz:yH8N5FrvkN/LuEFRytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T121546A01B790C0B2D26624324896D77A97AEBC305F655BC777907B3DAE312C1AE3934Esha3_384: c31951baf257f02461e473ee76e0d45bfd44a57712086337f2f6f2180a6264e72793f00fddf5b3e15ed96ffda444be43ep_bytes: e8a2850000e978feffff8bff558bec51timestamp: 2016-02-01 12:33:12
Version Info:
FileDescription: ftruferfrefreyghuyg 应用程序FileVersion: 1, 0, 0, 1InternalName: ftruferfrefreyghuygLegalCopyright: Copyright (C) 2016  ftruferfrefreyghuygOriginalFilename: ftruferfrefreyghuyg.exeProductName: ftruferfrefreyghuyg 应用程序ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

Malware.AI.3101284321 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.15788
FireEye	Generic.mg.922e305ed70779ad
CAT-QuickHeal	Trojan.Generic
ALYac	Gen:Variant.Doina.15788
Cylance	Unsafe
Zillya	Backdoor.Farfli.Win32.8016
K7AntiVirus	Trojan ( 003565701 )
K7GW	Trojan ( 003565701 )
Cybereason	malicious.ed7077
Baidu	Win32.Trojan.Farfli.ax
Cyren	W32/Trojan.IGQU-4456
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanProxy.Agent.NJC
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Doina.15788
NANO-Antivirus	Trojan.Win32.Farfli.edgmlt
Avast	Win32:Farfli-CP [Trj]
Tencent	Malware.Win32.Gencirc.10c440ba
Ad-Aware	Gen:Variant.Doina.15788
Emsisoft	Gen:Variant.Doina.15788 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PL321
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Farfli
GData	Gen:Variant.Doina.15788
Jiangmin	Heur:Trojan/Dialer
Avira	HEUR/AGEN.1130352
Antiy-AVL	Trojan/Generic.ASMalwS.176006C
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Doina.D3DAC
ViRobot	Trojan.Win32.Z.Farfli.304128
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2802764
McAfee	GenericRXLD-RS!922E305ED707
MAX	malware (ai score=88)
VBA32	Backdoor.Farfli
Malwarebytes	Malware.AI.3101284321
TrendMicro-HouseCall	TROJ_GEN.R002C0PL321
Rising	Backdoor.Farfli!1.A1B3 (CLASSIC)
Yandex	Trojan.Agent!DM7Mgta/2iY
SentinelOne	Static AI – Suspicious PE
eGambit	Trojan.Generic
Fortinet	W32/Farfli.ADV!tr
BitDefenderTheta	Gen:NN.ZexaF.34084.sq0@ayqvVTgj
AVG	Win32:Farfli-CP [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_70% (D)