Malware

How to remove “Malware.AI.3494354005”?

Malware Removal

The Malware.AI.3494354005 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3494354005 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3494354005?


File Info:

name: B3A307EFF1EFD5EE347A.mlw
path: /opt/CAPEv2/storage/binaries/a26ee4c12346c1bb4c0751d5934bcc5c8c5c7bb569424902f073c8fdf9c167fb
crc32: 54162299
md5: b3a307eff1efd5ee347acef8bf2ac69b
sha1: f4cc257142dff33ede18d6d146590b07b7bc0f75
sha256: a26ee4c12346c1bb4c0751d5934bcc5c8c5c7bb569424902f073c8fdf9c167fb
sha512: 1d43b332ed699e1cd83d3d2168a87869888b5e4cc637bcc10cfd6beb7e5f115cc3de71e3cad31f99636305320578d909c64be7215ca456cb766058d27d21c7b0
ssdeep: 49152:LRsnDBCplK2B2p8aYjl6ipd7BzRT5kKmRtZoZ:SDoBIxmR5MtoZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FEA52345F942CEB4D80216308C5EE7BB4819FC2EDE988907FBD51FAF78BA8B94541643
sha3_384: fa7cc2cc96fb7f48abb8efd08ddfebc776e2b3a7315e166a81cd356a0fde7ece1f64a3f40c45159f1ea6fc12d94aa08c
ep_bytes: 5589e557565381ecac010000c7042401
timestamp: 2016-04-27 01:27:47

Version Info:

0: [No Data]

Malware.AI.3494354005 also known as:

MicroWorld-eScanTrojan.GenericKD.71895599
FireEyeTrojan.GenericKD.71895599
SkyhighBehavesLike.Win32.Lockbit.vc
McAfeeArtemis!B5A79E33F277
MalwarebytesMalware.AI.3494354005
VIPRETrojan.GenericKD.71895599
K7AntiVirusTrojan ( 005690671 )
K7GWTrojan ( 005690671 )
Cybereasonmalicious.ff1efd
ESET-NOD32a variant of Generik.DJUWXQR
ClamAVWin.Packer.pkr_ce1a-9980177-0
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.GenericKD.71895599
NANO-AntivirusTrojan.Win32.Drop.hnqzqi
AvastWin32:DropperX-gen [Drp]
GoogleDetected
F-SecureTrojan.TR/Drop.Agent.bcafa
DrWebTrojan.DownLoad4.16266
TrendMicroTrojan.Win32.ZNYONM.USBLC824
EmsisoftTrojan.GenericKD.71895599 (B)
IkarusTrojan-Downloader.MSIL.Taily
GDataTrojan.GenericKD.71895599
VaristW32/Trojan.AWVO-6448
AviraTR/Drop.Agent.bcafa
Antiy-AVLTrojan/Win32.Sabsik
ArcabitTrojan.Generic.D4490A2F
ZoneAlarmTrojan-Dropper.Win32.Agent.tfwhtv
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.MalPE.R638032
BitDefenderThetaGen:NN.ZexaF.36802.qC0@aqbJ3hmG
ALYacTrojan.GenericKD.71895599
MAXmalware (ai score=86)
VBA32TScope.Trojan.Delf
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojan.Win32.ZNYONM.USBLC824
RisingDropper.Agent!8.2F (TFE:5:wwgWKqafItI)
YandexTrojan.DR.Agent!ZdbrpjdUrcI
FortinetW32/Kryptik.HWNB!tr
AVGWin32:DropperX-gen [Drp]

How to remove Malware.AI.3494354005?

Malware.AI.3494354005 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment