Malware.AI.3472001637 removal

The Malware.AI.3472001637 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3472001637 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is likely packed with VMProtect
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3472001637?

File Info:
name: C3922792DDA2692126FF.mlw
path: /opt/CAPEv2/storage/binaries/339ded2aecc8868c93dc7580c478aeb636f92bd06886e4a87c495f2c99f5e3b3
crc32: F361286B
md5: c3922792dda2692126ffbbb4cad3eaf5
sha1: ca38ec3edf4f060fb690b749d7517518729b9d11
sha256: 339ded2aecc8868c93dc7580c478aeb636f92bd06886e4a87c495f2c99f5e3b3
sha512: 66f0e2fef2415e872095842239c05445dbef14e7ae86ebaff1e4185f057ff9693fe5df62484023bd432867a564cd0937a379b8789e087f9c100336afe277f6a5
ssdeep: 49152:Mx01+lfJjEf885aFeNkTjYDNxqYIRF84g7JcUYhwGAPpMDLDvWbR:gG+l9EfbaENmyNxqHRAKUYhGpM0R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T195C523437D400480C07D2B76E3E7D6B54783BF0AB76A6C8B2698FE6A7E3111359DE11A
sha3_384: a3e1239df0b2b57fba88aa770bdc86951fff1ed9f42fec7caa686e7130c9979e1f97e04db1a6a61635fde5a768eb5562
ep_bytes: 6804fc6830e8d2e82500ff342480f904
timestamp: 2012-03-30 12:05:39

Version Info:
FileVersion: 1.0.0.0
FileDescription: 易语言程序
ProductName: 空间辅助
ProductVersion: 1.0.0.0
CompanyName: ざ゛↘范ゾ☆
LegalCopyright: ざ゛↘范ゾ☆ 版权所有
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Malware.AI.3472001637 also known as:

How to remove Malware.AI.3472001637?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.