Malware.AI.3402891149 removal tips

The Malware.AI.3402891149 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3402891149 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3402891149?


File Info:
name: CAF13AB291931867BEC7.mlw
path: /opt/CAPEv2/storage/binaries/9e4af32f038e32dcc6c196c0ee544336ea269c87bb6037ca3ead93e8c68cf8b3
crc32: 9C281E80
md5: caf13ab291931867bec7d7cdd8beb59a
sha1: 7c0781e5ee726bce1ebdf4f15515b1c727d5f599
sha256: 9e4af32f038e32dcc6c196c0ee544336ea269c87bb6037ca3ead93e8c68cf8b3
sha512: ae367df4be8d8a34df4a83b1a24420cfb3a9f844ceb29bf258d3533a679407ec05add986dbb48b510c3897999fd1b236039a8712d35607e79d7eac9bdc985d1e
ssdeep: 12288:dcsA0mvMCxVMDZAyDtg/Bwg75P4ZgGngEizT6p3wgm7hJM4kAuwA6+VD5udLsG:aV0mvMkaDZAyDtg5RZEiXuwgmY4k+sG
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17EE49E1135C184B7DE7234320A68E964D9EEA8315F22C6DF63D8167A5F342E1AF211BF
sha3_384: ad0b0b4b384c0fcce98587882207067940e8f9ee496d99342cc670081b19104d510bc1185b2751da751eb1ab1e285b98
ep_bytes: e87d0a0000e917feffff558bec8b4508
timestamp: 2022-09-02 21:59:12

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Application Virtualization Injector
FileVersion: 10.0.19041.1202 (WinBuild.160101.0800)
InternalName: mavinject32.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: mavinject32.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.1202
Translation: 0x0409 0x04b0

Malware.AI.3402891149 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Lazy.239913
Cylance	Unsafe
BitDefender	Gen:Variant.Lazy.239913
ESET-NOD32	a variant of Win32/GenKryptik_AGen.KJ
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
MicroWorld-eScan	Gen:Variant.Lazy.239913
Avast	Win32:SpywareX-gen [Trj]
Rising	Stealer.Agent!8.C2 (TFE:5:KtB78schAiS)
Ad-Aware	Gen:Variant.Lazy.239913
Emsisoft	Gen:Variant.Lazy.239913 (B)
DrWeb	Trojan.PWS.StealerNET.109
GData	Gen:Variant.Lazy.239913
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
ALYac	Gen:Variant.Lazy.239913
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3402891149
Ikarus	Trojan.Win32.RedlineStealer
AVG	Win32:SpywareX-gen [Trj]

How to remove Malware.AI.3402891149?

Malware.AI.3402891149 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X