Malware

Malware.AI.3353350746 removal tips

Malware Removal

The Malware.AI.3353350746 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3353350746 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Detects VirtualBox through the presence of a file
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.3353350746?


File Info:

name: 72E589CCA31AF5EBB8A3.mlw
path: /opt/CAPEv2/storage/binaries/5f5ab4447a08d1d1e37d6725204a52c577a6795dc66d48e09462979964307131
crc32: 2137CE78
md5: 72e589cca31af5ebb8a345009f649382
sha1: 64ba13cf1bc8d369a908af7b23d288bddddc723d
sha256: 5f5ab4447a08d1d1e37d6725204a52c577a6795dc66d48e09462979964307131
sha512: ed6de9362a085aa8dbb8bf3bb032ef5f846ca51daa15be6d4b98c80d5d4b79338ec653ebf0daafabaab00278f20e47c306a59d5b7568707d816afcffcb426259
ssdeep: 24576:HJA/oXoy4Yv5s2R4GfhLlmkPSwSh7XzPl:HJA/oXo40K6Rh7j
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13D55CF32B590D033F5D211B286BE6A78593AAD25132E80C7F6C52AD89F705F16A3F317
sha3_384: 63345c42d4356a20de8aec4770d9c65611142277d0ffe4e7a88ec6b3be282552ea5831d15285fdd354874bcc0a26e9e2
ep_bytes: e86d4e0000e979feffff8bff558bec8b
timestamp: 2021-04-22 02:35:07

Version Info:

FileDescription: Java(TM) Platform SE Binary
FileVersion: 1.2.12.1
OriginalFilename: Java.exe
ProductName: Java(TM) Platform SE 8
ProductVersion: 1.2.12.1
Translation: 0x0409 0x04b0

Malware.AI.3353350746 also known as:

BkavW32.AIDetect.malware2
LionicHeuristic.File.Generic.00×1!p
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Cerbu.140027
FireEyeGeneric.mg.72e589cca31af5eb
ALYacGen:Variant.Cerbu.140027
CylanceUnsafe
SangforTrojan.Win32.Bingoml.Vtp3
K7AntiVirusTrojan ( 00595bf11 )
AlibabaTrojan:Win32/Generic.00a814c3
K7GWTrojan ( 00595bf11 )
BitDefenderThetaGen:NN.ZexaE.34698.rr0@aa5tTPkj
CyrenW32/ABRisk.WDLZ-2801
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent.AELP
TrendMicro-HouseCallTROJ_GEN.R002C0WIS22
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Bingoml.gen
BitDefenderGen:Variant.Cerbu.140027
CynetMalicious (score: 100)
APEXMalicious
TencentWin32.Trojan.Bingoml.Kajl
Ad-AwareGen:Variant.Cerbu.140027
EmsisoftGen:Variant.Cerbu.140027 (B)
VIPREGen:Variant.Cerbu.140027
TrendMicroTROJ_GEN.R002C0WIS22
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
Ikarusnot-a-virus:Downloader.LMN
AviraHEUR/AGEN.1249167
MAXmalware (ai score=80)
Antiy-AVLTrojan/Generic.ASMalwS.5123
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Cerbu.140027
GoogleDetected
AhnLab-V3Malware/Win.Generic.R441525
McAfeeGenericRXAA-AA!72E589CCA31A
VBA32BScope.TrojanDropper.Agent
MalwarebytesMalware.AI.3353350746
AvastWin32:Evo-gen [Trj]
RisingTrojan.Bingoml!8.1226A (TFE:5:Qlpxc1lgRqV)
FortinetW32/GenKryptik.FJOS!tr
AVGWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.3353350746?

Malware.AI.3353350746 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment