Categories: Malware

Should I remove “Malware.AI.3158339339”?

The Malware.AI.3158339339 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3158339339 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Injection with CreateRemoteThread in a remote process
Creates RWX memory
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.3158339339?


File Info:
crc32: 7B43365Cmd5: 070137418a2d7a75ebddbb74e3f95397name: 070137418A2D7A75EBDDBB74E3F95397.mlwsha1: 87fd9c88309ddfeeffecdc07d643fb599718782bsha256: 213dc65cbe009793ad0ee64798b58ce9036f96d1e135a1983cca1d24eb322987sha512: 99960a942897cde755eb6878f6d29d0b4b8c59dacc404f17c21bba03eba01a8d2281a8ca4696ac1507f0200b07a61f733eea7f5c39f75b5ecc21550e98b89047ssdeep: 49152:Zjk0/7yMT/dBk7qhnTDDcCTh/8JQAWtigkR1cTT2A2zz9Jp00wfW9NAAMK:ZxTyMD/Z8mtigkR1W2A2zzt008nKtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: FileVersion: 1.2.1.2CompanyName: Smart Packer SolutionsLegalTrademarks: Comments: www.smartpacker.nlProductName: Smart Packer Pro TrialProductVersion: 1.2.0.0FileDescription: OriginalFilename: Translation: 0x0413 0x04e4

Malware.AI.3158339339 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 004c01dd1 )
DrWeb	Trojan.Click1.29730
Cynet	Malicious (score: 100)
ALYac	Trojan.Generic.6969844
Cylance	Unsafe
Zillya	Trojan.VBiframe.Win32.1054
Sangfor	Trojan.Win32.Click.VBiframe
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	TrojanSpy:Win32/Sality.8c5ca075
K7GW	Trojan ( 004c01dd1 )
Cybereason	malicious.18a2d7
Cyren	W32/Risk.VMIS-1276
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Sality.NBI
APEX	Malicious
Avast	FileRepMetagen [Malware]
ClamAV	Win.Trojan.6969844-1
Kaspersky	Trojan-Spy.Win32.Zbot.sbll
BitDefender	Trojan.Generic.6969844
NANO-Antivirus	Trojan.Win32.VBiframe.cukspx
MicroWorld-eScan	Trojan.Generic.6969844
Tencent	Malware.Win32.Gencirc.116b64ad
Ad-Aware	Trojan.Generic.6969844
Comodo	Malware@#2tiuzkhsup429
BitDefenderTheta	Gen:NN.ZelphiF.34294.PU3@auqp7WgO
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.070137418a2d7a75
Emsisoft	Trojan.Generic.6969844 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanClicker.VBiframe.arv
Webroot	W32.Heuristic.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1758F1
Microsoft	Backdoor:Win32/Bifrose
GData	Trojan.Generic.6969844
McAfee	GenericRXAA-FA!070137418A2D
MAX	malware (ai score=99)
VBA32	TrojanSpy.Zbot
Malwarebytes	Malware.AI.3158339339
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.98 (RDML:OwpvWTWtjyTx9pKJd9nQmA)
Yandex	Trojan.Agent!7cQYgwTTaac
Ikarus	Trojan-Clicker.Win32.VBiframe
MaxSecure	Trojan.Malware.1601866.susgen
Fortinet	W32/VBiframe.DKM!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml