Malware

Malware.AI.3102408898 removal guide

Malware Removal

The Malware.AI.3102408898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3102408898 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.3102408898?


File Info:

name: 1745DCAD412333772058.mlw
path: /opt/CAPEv2/storage/binaries/9f9937097e7a7c369c890a8204f0518efba111e4b05184cab505bb0a5482a0f1
crc32: 370576F2
md5: 1745dcad412333772058ea485c1cd7b8
sha1: 5b5f9ac4705618a11ca0c6621d3c33cee1ce9344
sha256: 9f9937097e7a7c369c890a8204f0518efba111e4b05184cab505bb0a5482a0f1
sha512: d28f74acbdc0363828aabefc126dd0b5535bf59d2a8c257eb65f5d12447a04c4fab9939cb286c7e7a24080991d1075257781abc98e15028ef4717136d251521a
ssdeep: 12288:ACJyCtgXprctoPL5ouNlzcsmnTbV+jj9BewWHanMrGcfEW3hSC0EaJtB:AC3tuWoj5xH+nToLrNngfEWfyJtB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C12502A356CFCB0AE3C1993D40B9BE31C4AA97B429138573E2707535986350BAD13B7B
sha3_384: 1a16484ff34964243b50395536a3d7f6a03011da61f18bfa66047fe514994e7ffe0021a9feaf5238f6a8393d64821c5b
ep_bytes: 60e803000000e9eb045d4555c3e80100
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Malware.AI.3102408898 also known as:

LionicAdware.Win32.Elex.2!c
Elasticmalicious (high confidence)
DrWebTrojan.Rootkit.22035
MicroWorld-eScanGen:Variant.Graftor.838876
FireEyeGen:Variant.Graftor.838876
McAfeeRDN/Generic PUP.x
CylanceUnsafe
ZillyaTrojan.Woool.Win32.527
SangforAdware.Win32.Elex.sgn
K7AntiVirusTrojan ( 00561f181 )
AlibabaAdWare:Win32/Woool.984a99ea
K7GWTrojan ( 00561f181 )
Cybereasonmalicious.d41233
CyrenW32/Woool.C.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Woool.H
TrendMicro-HouseCallTROJ_GEN.R002C0WL321
Kasperskynot-a-virus:AdWare.Win32.Elex.sgn
BitDefenderGen:Variant.Graftor.838876
NANO-AntivirusTrojan.Win32.Elex.ihlkmc
AvastWin64:DangerousSig [Trj]
TencentMalware.Win32.Gencirc.10ce39f4
Ad-AwareGen:Variant.Graftor.838876
EmsisoftGen:Variant.Graftor.838876 (B)
TrendMicroTROJ_GEN.R002C0WL321
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
SophosMal/Generic-S (PUA)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Graftor.838876
JiangminAdWare.ELEX.fcx
AviraRKIT/Agent.kykpl
MAXmalware (ai score=85)
Antiy-AVLTrojan/Generic.ASMalwS.30F61B5
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Graftor.DCCCDC
ViRobotTrojan.Win32.Z.Elex.1045504
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.RL_Generic.R354068
VBA32Adware.Elex
ALYacGen:Variant.Graftor.838876
MalwarebytesMalware.AI.3102408898
APEXMalicious
RisingTrojan.MalCert!1.B79A (CLASSIC)
YandexTrojan.Woool!fMizn18milI
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Woool.H!tr
AVGWin64:DangerousSig [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Malware.AI.3102408898?

Malware.AI.3102408898 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment