Malware

Malware.AI.3518915272 removal guide

Malware Removal

The Malware.AI.3518915272 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3518915272 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.3518915272?


File Info:

name: C55B78BB81C67A949A61.mlw
path: /opt/CAPEv2/storage/binaries/a327aa2e03bb5d6150b8fe542a5ad15dc3244dc7923160d3f817818ccbb19c5b
crc32: EA7E9674
md5: c55b78bb81c67a949a61fb037ec474a9
sha1: f7cdc8cfb8514151f5b464f28fd3fa1f37bb65fc
sha256: a327aa2e03bb5d6150b8fe542a5ad15dc3244dc7923160d3f817818ccbb19c5b
sha512: 6228024759005843b75bd8e17b41597d9167480f897b36c6458dcbd31f61f215c9fb806ff8f06bd3e39649d8c3738d4e87693473bace0ceaeb18f51f8fc84c04
ssdeep: 12288:qIY6HPZw5ifS2LXnY5wsFrZ/cEGXSJ5U3cjdA4:NHRw5iq2LXYxrdhGXd6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177B4F10FE29DD013E443D6FC509DC6534DF95B04A84BF6D92CF7960EA84886B2A683E7
sha3_384: a3d06d65e458bc76be4c7c0442ff1c82848fc1cf35fb60081a10aa9cda45bdf93d62ab7c3d5a969f184c65f7155af59c
ep_bytes: 68000000005b83ec04893c2409d258b9
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.3518915272 also known as:

BkavW32.AIDetect.malware1
LionicHeuristic.File.Generic.00×1!p
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.373115
McAfeeGlupteba-FTTQ!C55B78BB81C6
CylanceUnsafe
VIPREGen:Variant.Razy.373115
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058e60a1 )
AlibabaTrojan:Win32/Kryptik.545f2fcc
K7GWTrojan ( 0058e60a1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Kryptik.ECA.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.XVS
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.373115
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Evo-gen [Trj]
RisingTrojan.Kryptik!1.D614 (CLASSIC)
Ad-AwareGen:Variant.Razy.373115
EmsisoftGen:Variant.Razy.373115 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.DownLoader40.13474
ZillyaTrojan.Kryptik.Win32.3252375
McAfee-GW-EditionBehavesLike.Win32.Glupteba.hc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c55b78bb81c67a94
SophosMal/Generic-R + Troj/Agent-BGOS
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Razy.373115
JiangminTrojan.Generic.gxrnz
GoogleDetected
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=81)
Antiy-AVLTrojan/Generic.ASMalwS.50E8
ArcabitTrojan.Razy.D5B17B
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R299848
Acronissuspicious
BitDefenderThetaAI:Packer.36C2946D1E
ALYacGen:Variant.Razy.373115
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.3518915272
TencentTrojan.Win32.Kryptik.fh
YandexTrojan.Agent!9qOcAY2+2BY
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.b81c67
PandaTrj/CI.A

How to remove Malware.AI.3518915272?

Malware.AI.3518915272 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment