Malware.AI.3645903446 removal tips

The Malware.AI.3645903446 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3645903446 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• A scripting utility was executed
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Collects and encrypts information about the computer likely to send to C2 server
• Installs itself for autorun at Windows startup

How to determine Malware.AI.3645903446?

File Info:
name: CA0613C4BDFDD3BBF01E.mlw
path: /opt/CAPEv2/storage/binaries/000a781d7352f748f4283c31ee3ba0fab6b786ec55c96477549a43675bac59f0
crc32: FAD8E6BD
md5: ca0613c4bdfdd3bbf01ebfe25971db5f
sha1: 0eb8953b69602a53be8aad021551c409347a7dd7
sha256: 000a781d7352f748f4283c31ee3ba0fab6b786ec55c96477549a43675bac59f0
sha512: 09dac065e514fa3ef302e52f16a9d09605f7b86951b679358c1925bd7d0db9950a25bc8670842b7226603631155f3f0135b41073c4038c583637cf3f653014b4
ssdeep: 192:prUe0cM+d+ILsfUcBHjq2pc+fyHSSaHXdvXDDJ5pdeI:pUe0t+poc+He2bfyxaleI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T106923139B29CE273F179C2B74D138296B059BD307A118D12FA8B7F2D2A7049269D171F
sha3_384: 31a78e5055f3829f06316e80bcf5408f2717421215ad9bfa59ed3923b21849fbe8b57cb20f1fa046ed1581817e6df9d3
ep_bytes: 68dc124000e8eeffffff000000000000
timestamp: 2019-02-07 07:32:38

Version Info:
Translation: 0x0409 0x04b0
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe

Malware.AI.3645903446 also known as:

How to remove Malware.AI.3645903446?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.