Malware.AI.3635322404 removal

The Malware.AI.3635322404 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3635322404 virus can do?

• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Unconventionial binary language: Portuguese (Brazil)
• Unconventionial language used in binary resources: Portuguese (Brazilian)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• A scripting utility was executed
• Detects Bochs through the presence of a registry key
• Checks the version of Bios, possibly for anti-virtualization
• Attempted to write directly to a physical drive
• Attempts to interact with an Alternate Data Stream (ADS)
• Collects information to fingerprint the system
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3635322404?

File Info:
name: 60A832A95DBEB429D0B2.mlw
path: /opt/CAPEv2/storage/binaries/0b3df30ae17c1bcd6a031f008a6df9e08950a334a17ea0a54184fbb13c7dd7e1
crc32: B8B9F67F
md5: 60a832a95dbeb429d0b296f960ffb8df
sha1: 16957cd1dc8dffca386b1c63f9491a9e32a4c6e0
sha256: 0b3df30ae17c1bcd6a031f008a6df9e08950a334a17ea0a54184fbb13c7dd7e1
sha512: d8fe418efda96544d0f0efb2b7225925c20be75d04a8926266e947631f151c224d4dc7e2cc8e6067390fa5e29255fae517f23acb52e6213df6215c8d9610fa28
ssdeep: 12288:iCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBga4IY4NZdPjF:iCdxte/80jYLT3U1jfsWaU4PZX6bQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13C25AE2273DDC360CB669173BF69B3056EBB7C750630B8572F882E78A970561162C7A3
sha3_384: 4feb5d07e8e4408f788645d31837acf9d3b9d0da3f02c473397275739b70c4d1709667dbe72c4b1476c907941c43acd6
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2018-06-05 20:33:53

Version Info:
FileVersion: 1.0.0.0
Comments: http://www.autoitscript.com/autoit3/
FileDescription: Tivit Microsoft Office Uninstaller
ProductVersion: 15.0.0
LegalCopyright: ©Tivit 2018
ProductName: Microsoft Office Uninstaller
BuildDate: 05/06/2018
AutoITVersion: 3.3.14.2
Translation: 0x0416 0x04b0

Malware.AI.3635322404 also known as:

How to remove Malware.AI.3635322404?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.