Malware

Malware.AI.3339214763 removal guide

Malware Removal

The Malware.AI.3339214763 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3339214763 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Malware.AI.3339214763?


File Info:

name: E78CCFE581714CAE1E4A.mlw
path: /opt/CAPEv2/storage/binaries/2cd5c5f0f17108a9c533030f93efb1527f42f1af357ede4ecee84c93eb4a3b0e
crc32: 93A3A3F2
md5: e78ccfe581714cae1e4a66c285519d7b
sha1: d31379078f53ca1548b16198f279d6dd082daf80
sha256: 2cd5c5f0f17108a9c533030f93efb1527f42f1af357ede4ecee84c93eb4a3b0e
sha512: dbbd3c38cc151f9c8785f2ea454800fa7ca91438e365a34d364fc98f58fa3300cc766b8d2e3fddc9048d1373d02fcd4407cb6e67a354ad338be6491e819d0f93
ssdeep: 12288:OxJsTaGsRCmrH9t5Lq/RVchYJKJRIW1FOkkARz:OWabV9rLq/RcRIuyAR
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T171B4C0523AF88BC4CA2AD23146BE97C5E371A340FF1D578B9954BD1A0EA3ED21D381C5
sha3_384: 452dfc0a1c32bc679ce69e5b2bb7d13e7b4f390d99a14144a0e50289a8a9bd2e4cacfc848dfb3268a211c95d630b2c76
ep_bytes: 475150455243b96000000065498b0145
timestamp: 2047-04-05 08:35:42

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Application Layer Gateway Service
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
InternalName: ALG.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: ALG.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.17134.1
Translation: 0x0409 0x04b0

Malware.AI.3339214763 also known as:

Elasticmalicious (high confidence)
DrWebWin64.Expiro.132
MicroWorld-eScanWin64.Expiro.Gen.6
FireEyeGeneric.mg.e78ccfe581714cae
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusVirus ( 00535e4a1 )
K7GWVirus ( 00535e4a1 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW64/Expiro.AH.gen!Eldorado
ESET-NOD32a variant of Win64/Expiro.CO
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
ClamAVWin.Virus.Expiro-9876440-0
KasperskyHEUR:Virus.Win64.Expiro.gen
BitDefenderWin64.Expiro.Gen.6
NANO-AntivirusVirus.Win64.Expiro.clnvwd
AvastWin64:Xpirat [Inf]
Ad-AwareWin64.Expiro.Gen.6
EmsisoftWin64.Expiro.Gen.6 (B)
TrendMicroVirus.Win64.EXPIRO.MR
SentinelOneStatic AI – Malicious PE
SophosML/PE-A + W64/Expiro-AX
IkarusVirus.Win64.Expiro
GDataWin64.Expiro.Gen.6
JiangminTrojan.Bingoml.akq
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASVirus.30B
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
Acronissuspicious
ALYacWin64.Expiro.Gen.6
MalwarebytesMalware.AI.3339214763
APEXMalicious
MAXmalware (ai score=86)
FortinetW64/Expiro.BS
AVGWin64:Xpirat [Inf]
Cybereasonmalicious.78f53c
MaxSecurevirus.win64.expiro.gen

How to remove Malware.AI.3339214763?

Malware.AI.3339214763 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment