Malware.AI.3369706854 removal instruction

The Malware.AI.3369706854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3369706854 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• A process created a hidden window
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Attempts to stop active services
• Creates a hidden or system file

How to determine Malware.AI.3369706854?

File Info:
name: 8ABFAB9D8990233109D2.mlw
path: /opt/CAPEv2/storage/binaries/97d55817813f9af8897a16f3b0f0bd2285808a5238ce72461fca56640bb7b565
crc32: 1F1DC926
md5: 8abfab9d8990233109d25e7507c28d67
sha1: 0973190ad7d4ad1e1b4dc6b69d88994ea463cb15
sha256: 97d55817813f9af8897a16f3b0f0bd2285808a5238ce72461fca56640bb7b565
sha512: e508be6ae7493a42e2efcef77d9f38818e60d34bb4656b11b40c105f42b123c718856b7753c5ae6b3fff88063d44ca6613e975f71dccf92f590bd5608049dc02
ssdeep: 3072:q1N1vX0/HR63Z+zVhgdrQ+7sus1rz5P8XkB9sxpkkn1+1VJNpIiTiEAcGj7L:uXeH8JYhl+iv1vsHhcBIipM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DBF31222199DA14BF89A293B8B8D977C43E62E1059007D0B6951374C2C376EDFD32BE7
sha3_384: 210bf98e219f67c9af8e7449b26e7178e1e2c1276fc8f79ef5f4da481234e2e092502ed3c70ad3c231b119f3de2c25e8
ep_bytes: 558bec81eca4000000811dbc3e4200ae
timestamp: 2011-03-23 19:15:02

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft (R) HTML Application host
FileVersion: 9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
InternalName: MSHTA.EXE
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: MSHTA.EXE
ProductName: Windows® Internet Explorer
ProductVersion: 9.00.8112.16421
Translation: 0x0409 0x04b0

Malware.AI.3369706854 also known as:

How to remove Malware.AI.3369706854?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.