Malware

Malware.AI.3451963949 information

Malware Removal

The Malware.AI.3451963949 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3451963949 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.3451963949?


File Info:

name: B1E23FC6AEFE1D4BD357.mlw
path: /opt/CAPEv2/storage/binaries/934bfbc4dc92434684a94c2bcf287b315e90d87e651bb862d1608a9286479177
crc32: 9830C474
md5: b1e23fc6aefe1d4bd35780af72efe171
sha1: 38b1f320773ae0721a69c45100b07467a849b9b7
sha256: 934bfbc4dc92434684a94c2bcf287b315e90d87e651bb862d1608a9286479177
sha512: 26a380d7a3b70c6ca0c64d0cd971200d3844f6dd7057586dae8883c98a44066528539de96e21a4fc76dc97e048a0358dc202b15d1c7fdfa0d3d144f571babad7
ssdeep: 49152:P53+teg97qajRAK8/8PMW9zaqvex4xJi7ZHEmr4+LA7hiBGW+w0G5F1h:V+tcad90W9zdlJiF78wbB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A064B50F9DB80FAE603153044ABA37F5B30AA095734CBD7E6406F9AF8776E24D72216
sha3_384: b940af722622b4d18d9da6d80cf0ca06255a6171c59dc65f31dc8c10fec6fc37c734cc7ceb74e86a8a8a107fb8133414
ep_bytes: e92bdbffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.3451963949 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Encoder.trOe
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.37153531
FireEyeTrojan.GenericKD.37153531
McAfeeArtemis!B1E23FC6AEFE
MalwarebytesMalware.AI.3451963949
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/Shelma.a5281f91
BitDefenderThetaAI:Packer.ABC6D03A21
CyrenW32/Trojan.DSNZ-4636
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Shelma.bkoa
BitDefenderTrojan.GenericKD.37153531
AvastWin32:Malware-gen
TencentWin32.Trojan.Shelma.Pgco
Ad-AwareTrojan.GenericKD.37153531
ZillyaTrojan.Shelma.Win32.9737
TrendMicroTROJ_GEN.R002C0WL621
McAfee-GW-EditionBehavesLike.Win32.Trojan.wh
EmsisoftTrojan.GenericKD.37153531 (B)
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.37153531
AviraTR/Crypt.XPACK.Gen
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
VBA32Trojan.Shelma
ALYacTrojan.GenericKD.37153531
MAXmalware (ai score=81)
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002C0WL621
RisingTrojan.Generic@ML.86 (RDML:6m5acFUIok8BSR7MTjkF5A)
YandexTrojan.Shelma!0Xnu+HN3Eoo
IkarusTrojan.Crypt
FortinetMalicious_Behavior.SB
AVGWin32:Malware-gen
PandaTrj/CI.A

How to remove Malware.AI.3451963949?

Malware.AI.3451963949 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment