About “Malware.AI.3385387844” infection

The Malware.AI.3385387844 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3385387844 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Dynamic (imported) function loading detected
• Expresses interest in specific running processes
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Attempts to disable or modify Explorer Folder Options
• Attempts to disable System Restore
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Malware.AI.3385387844?

File Info:
name: AA655D0F1AC3164F6395.mlw
path: /opt/CAPEv2/storage/binaries/c22789c6505fe7978664b80a83d4d7269c00410198696f8d7d989b70b905e51e
crc32: 5475B024
md5: aa655d0f1ac3164f6395a61eaa5005c8
sha1: 00068f24036380e62369bd20e1182d24faf44d2e
sha256: c22789c6505fe7978664b80a83d4d7269c00410198696f8d7d989b70b905e51e
sha512: d1f5e4c96fca608f293519efcbe9003cdb2e32cbd94f6479c43772c2eadbf44886061795d9099b535f1eb6067e6d75344c650549c6279b0c7326088ce5ce30e4
ssdeep: 1536:yOcjUpkWb2TTghpwukOcjUpkWb2TTghpwuh:yOcjWJuutkOcjWJuuth
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C8939D037B17E00DF624C9395A0641AD63857EA18E037E6BA2253E7B3E375C62E47732
sha3_384: 2c9774b294dd78866da568264e65e6161d1d8a7658d4abe4dcb48e86b23ab11037b2f7a4646f3e22886786b526ddb770
ep_bytes: 60be007041008dbe00a0feff5783cdff
timestamp: 2006-07-15 11:26:47

Version Info:
Translation: 0x0409 0x04b0
ProductName: 4k51k4
FileVersion: 1.12.1985
ProductVersion: 1.12.1985
InternalName: 4K51K4
OriginalFilename: 4K51K4.exe

Malware.AI.3385387844 also known as:

How to remove Malware.AI.3385387844?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.