About “Malware.AI.3279226301” infection

The Malware.AI.3279226301 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3279226301 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3279226301?


File Info:
name: E4D4A751A4C5D06774AE.mlw
path: /opt/CAPEv2/storage/binaries/d881d16ff03bf95b08d961be40ee3fd8e7ccda8e1850e2a8580c5e2d96d0e531
crc32: B54968A4
md5: e4d4a751a4c5d06774ae1be92c294154
sha1: 24f1ba8c56713936489db9ff63c8b34b9c4e1c81
sha256: d881d16ff03bf95b08d961be40ee3fd8e7ccda8e1850e2a8580c5e2d96d0e531
sha512: 9f0a612c424292afd379cbd59cee98be56544b9d3bb8a2c9f63ae5f748f3a4a2b325fa0b7afc4ea2430beb50de0db6932f7145f4fec8e15efff49e2c0063bc6b
ssdeep: 12288:TM2GAu1mt0LDwrepU/s9tYDiFCcSYFz/TFlyfPD9M2GAu1mt0LDwrepd:TM84pEs9tY+FCgFjplwZM84pd
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1BF157C32FEE4D032D2BF0D751BF0D764493AFA304B615697E3A8869D0D602D1A636B27
sha3_384: 275269b5be15147c8293270645eca5d4c804689b0c40f0f07cddb12a644b61f5d1b84a74fc257bb283d77287d0fc5a46
ep_bytes: e85f3c0000e97bfeffffcccccc8b5424
timestamp: 2015-12-11 23:37:11

Version Info:
CompanyName: Microsoft Corporation
FileDescription: AppVDllSurrogate32
InternalName: AppVDllSurrogate
LegalCopyright: Copyright © 2014 Microsoft Corporation
LegalTrademarks: Microsoft® is a registered trademark of Microsoft Corporation.
OriginalFilename: AppVDllSurrogate32.exe
ProductName: Microsoft Application Virtualization (App-V)
FileVersion: 5.0.10334.0
ProductVersion: 5.0.10334.0
PrivateBuild: 50sp3Servicing (by sftbuild on MBAMR02BLD01)
Translation: 0x0409 0x04b0

Malware.AI.3279226301 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.e4d4a751a4c5d067
ALYac	Trojan.GenericKD.38562063
Sangfor	Virus.Win32.Save.a
Baidu	Win32.Trojan.VB.t
Cyren	W32/Ipamor.AI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Avast	Win32:VB-FBX
ClamAV	Win.Malware.Dqan-9882956-0
Sophos	Generic ML PUA (PUA)
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
Avira	HEUR/AGEN.1141982
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.1V6HZ6L
Cynet	Malicious (score: 100)
McAfee	RDN/Generic.com
Malwarebytes	Malware.AI.3279226301
Rising	Worm.VB!1.DA3E (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.883D!tr
AVG	Win32:VB-FBX

How to remove Malware.AI.3279226301?

Malware.AI.3279226301 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X