Malware.AI.3559059359 removal guide

The Malware.AI.3559059359 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3559059359 virus can do?

Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.3559059359?


File Info:
name: 116FEA0FF6681C6CA6D1.mlw
path: /opt/CAPEv2/storage/binaries/ff9235f7f19ea5ae5ab7ea09c34170e153b7fe8d05bd32fa93c23399082125a5
crc32: A8EF33BC
md5: 116fea0ff6681c6ca6d13c6f8fc8ff56
sha1: c0bb1630c0c1c413eb51ffdad117172db3b39d0f
sha256: ff9235f7f19ea5ae5ab7ea09c34170e153b7fe8d05bd32fa93c23399082125a5
sha512: 1b83c455cb093471498463eb23b9d325467a27b7a0fd2120688e88497c9a4b7ed82312ef831a47df44ee56974f91f98fb13764ea32f7d0ac582813bf9a88e991
ssdeep: 196608:qJ2p17jJC02dU29+NAwVsIY8JJ9Ae4GdpMWcS/LBg3FfSEDQJejnLqFH:qJczifKce4GnMWcGLBgVFDMcnLs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10BA633A6FACB6F70E21141FA021986597C10BA645FD2317A5EFDE90CA27B3845C3C6C7
sha3_384: 892b563dca6c42e659a203c9fd22baa83404cf3c92ad0201f270edba61e4c42d41290b203b27a163fb1377ef24b915aa
ep_bytes: 558becb9080000006a006a004975f953
timestamp: 2013-10-31 10:13:11

Version Info:
CompanyName: IObit
FileDescription: Driver Backup Package
FileVersion: 1.1.0.0
InternalName: UpdateDB
LegalCopyright: Copyright© 2013 IObit. All Rights Reserved.
LegalTrademarks: IObit
OriginalFilename: SfxStub.exe
ProductName: Driver Booster
ProductVersion: 1.1.0.0
Comments: Driver Database Updater
Translation: 0x0409 0x04e4

Malware.AI.3559059359 also known as:

tehtris	Generic.Malware
ClamAV	Win.Dropper.Genericrxjd-9884871-0
Cyren	W32/Jacard.A.gen!Eldorado
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Packed.Dico.dxt
Google	Detected
VBA32	Trojan.Wacatac
Malwarebytes	Malware.AI.3559059359
Rising	Trojan.Generic@AI.100 (RDML:mOGZddB6VSE0mea19JFr9A)
Ikarus	Trojan.Yarwi
Fortinet	W32/Agent.YARW!tr

How to remove Malware.AI.3559059359?

Malware.AI.3559059359 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X