Malware.AI.3320272648 removal guide

The Malware.AI.3320272648 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3320272648 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Deletes executed files from disk

How to determine Malware.AI.3320272648?


File Info:
name: 6D10CB0A5D187072B318.mlw
path: /opt/CAPEv2/storage/binaries/c61f78f95dea48ba02d3bb98fddc7f404da45bf4a64e75246d5890d97f729bf0
crc32: B9F35333
md5: 6d10cb0a5d187072b318f38c7494f188
sha1: dfcc688a959bd49fb1304d4bb9c1bfd7a2b1e0e7
sha256: c61f78f95dea48ba02d3bb98fddc7f404da45bf4a64e75246d5890d97f729bf0
sha512: 724fa831215d91a2315d29aea6ce27e85efd98c80465ff740a085059027ca1e748c3b060baab7ed5cf39cb1639f4e45ff37f6d731cf16579032ea34030362380
ssdeep: 1536:co7ftfkS5g9YOms+gZcQipICdXkNDqLLZX9lItVGL++eIOlnToIftwzdKos3JWPI:cmFfHgTWmCRkGbKGLeNTBft4dKf
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D9B34AC0EE9141F2F6E90531C061757E93272E34DB17A8EBC35839025A2F7C1AB3A2D6
sha3_384: f48bf589a4d149bb5418521bb3d7b96d14aa226499c11181bd9b2442cb60d11af54589fe095ff729551d3ff7996bff7e
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2018-02-01 20:18:05

Version Info:
0: [No Data]

Malware.AI.3320272648 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Skyhigh	BehavesLike.Win32.RealProtect.ch
Malwarebytes	Malware.AI.3320272648
Sangfor	Trojan.Win32.Save.a
BitDefenderTheta	Gen:NN.ZexaF.36680.guW@aC0QXDp
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
AhnLab-V3	Malware/Win32.Generic.C2472342
McAfee	Artemis!6D10CB0A5D18
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDMK:usxAS88Thy4CW8ZCM6WRMw)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.8328450.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Malware.AI.3320272648?

Malware.AI.3320272648 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X