Should I remove “Malware.AI.3280814709”?

The Malware.AI.3280814709 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3280814709 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Malware.AI.3280814709?


File Info:
name: CF8BA319D7523734A7C7.mlw
path: /opt/CAPEv2/storage/binaries/f09d2fdcfee29c4f7c2a528e1fc680797f6be280985192a283995526ee0e6e8d
crc32: C75E4DA5
md5: cf8ba319d7523734a7c73660d1b263d7
sha1: f8eeb90578602b5bef37f12ef1b00da742c658c9
sha256: f09d2fdcfee29c4f7c2a528e1fc680797f6be280985192a283995526ee0e6e8d
sha512: 52cabdf5464b5017b22265423b9cd6c49aee26af9510a10027a1fe9086b37dc0fef88e75c31007fb4ee1219ad85faafc6aca4aca385b3c549fbfe0145703211d
ssdeep: 3072:R6Uf3mV64QVGNNLSVADEyBlrEQuWfB8O:IUOQViNLSVADEwJEcfB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12F44281032E5882BC33B56F494229262137A7E4764E8E6CD6CC6BACFE9F270CD515673
sha3_384: 643cd8fa925294f2383c3d0d70db9db7f6397711acc0a77dd21bcd59afce57dfc35ea7b1b8618eb50a2c81e08ffd530e
ep_bytes: ff250020400001000000000000008280
timestamp: 2020-03-20 23:37:34

Version Info:
Translation: 0x0000 0x04b0
Comments: CV-LAB
CompanyName: CV-LAB
FileDescription: Engine By CV-LAB
FileVersion: 1.0.0.0
InternalName: Ebay BruteForce [AS-CODE].exe
LegalCopyright: CV-LAB
LegalTrademarks: 
OriginalFilename: Ebay BruteForce [AS-CODE].exe
ProductName: Engine By CV-LAB
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3280814709 also known as:

Lionic	Trojan.Win32.Ursu.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.662622
FireEye	Gen:Variant.Razy.662622
McAfee	GenericRXKB-OK!CF8BA319D752
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Zpevdo.B
K7AntiVirus	Hacktool ( 005632911 )
Alibaba	Trojan:MSIL/Generic.e9dc47c1
K7GW	Hacktool ( 005632911 )
Cybereason	malicious.9d7523
ESET-NOD32	a variant of MSIL/HackTool.BruteForce.ST
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
BitDefender	Gen:Variant.Razy.662622
Ad-Aware	Gen:Variant.Razy.662622
TrendMicro	TROJ_GEN.R002C0PJR21
McAfee-GW-Edition	GenericRXKB-OK!CF8BA319D752
Emsisoft	Gen:Variant.Razy.662622 (B)
Paloalto	generic.ml
GData	Gen:Variant.Razy.662622
Antiy-AVL	Trojan/Generic.ASMalwS.30460BB
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Razy.662622
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3280814709
TrendMicro-HouseCall	TROJ_GEN.R002C0PJR21
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.89093840.susgen
Fortinet	MSIL/BruteForce.ST!tr
AVG	Win32:TrojanX-gen [Trj]

How to remove Malware.AI.3280814709?

Malware.AI.3280814709 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X