Malware

Malware.AI.348156895 removal tips

Malware Removal

The Malware.AI.348156895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.348156895 virus can do?

  • Uses Windows utilities for basic functionality
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.348156895?


File Info:

name: 3F61C7F8745B1EAC953B.mlw
path: /opt/CAPEv2/storage/binaries/41b6907b2f95d04085faebf01c42c019c6b9a5b8d4939fa20db2769d3b131caa
crc32: 87D2953B
md5: 3f61c7f8745b1eac953b43d83f9dc520
sha1: 885ced94ba6765abaabf49561fef2c14b40f2dad
sha256: 41b6907b2f95d04085faebf01c42c019c6b9a5b8d4939fa20db2769d3b131caa
sha512: 59cf34665bbd874f133f78f8529fece0af5929f30d8f0e0b3b5838c2593354b56790e1d4cb7b96fd447c43c1e8a564b2610c43e0f1ea27add3b0a850b28e9819
ssdeep: 768:eGHKmM0qauedO1d6pHzvZ4GHPqV76CJrrKOAa7Dg7/foC:eXmMyMWO0SEClC3oC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AE135B5DD348F9BEF9440533C536E4D25657BE3880A0862FA14AB10D6DF3362E6DAC4B
sha3_384: b5631141aa63b4a8afc94c89223d7a6831216b5122aab5fbe6a8aa3b15eb81c01190706e48d1b74e8b9b25c793c0c276
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2011-03-25 13:17:51

Version Info:

FileVersion: 1,0,0,1
ProductVersion: 1,0,0,1
Translation: 0x0000 0x04e4

Malware.AI.348156895 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
FireEyeGeneric.mg.3f61c7f8745b1eac
SkyhighBehavesLike.Win32.Generic.ph
McAfeeArtemis!3F61C7F8745B
Cylanceunsafe
Cybereasonmalicious.4ba676
Elasticmalicious (high confidence)
DrWebTrojan.Hosts.41698
Trapminemalicious.high.ml.score
SophosGeneric ML PUA (PUA)
IkarusVirus.Agent
JiangminTrojanDropper.Mudrop.cqe
WebrootW32.Dropper.Gen
Antiy-AVLTrojan[Dropper]/Win32.BcryptInject
Kingsoftmalware.kb.b.936
GoogleDetected
VBA32TrojanRansom.Gen
MalwarebytesMalware.AI.348156895
YandexPacked/MPress
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.216064600.susgen
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS

How to remove Malware.AI.348156895?

Malware.AI.348156895 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment