Malware.AI.3801222779 malicious file

The Malware.AI.3801222779 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3801222779 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Uses Windows utilities for basic functionality
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Detects Bochs through the presence of a registry key
• Checks the version of Bios, possibly for anti-virtualization
• Attempted to write directly to a physical drive
• Attempts to modify proxy settings
• Attempts to modify browser security settings
• Creates a copy of itself
• Deletes executed files from disk
• Touches a file containing cookies, possibly for information gathering
• Collects information to fingerprint the system
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3801222779?

File Info:
name: C61C7B976084332E96BE.mlw
path: /opt/CAPEv2/storage/binaries/931e6cf67d84496e1c23c51afad47bd68d60687c131c8a50f9b0182bf5acc03b
crc32: 3D7C648A
md5: c61c7b976084332e96be86952f2cbe31
sha1: e5da3a25b5701d16ec0a74cec4188de309497ae8
sha256: 931e6cf67d84496e1c23c51afad47bd68d60687c131c8a50f9b0182bf5acc03b
sha512: 3d71268da7887c86dc4d61ebb8d55f3e8a6eec3a4c730dd45481c0bfb78fdfd8d3e8c4b20870711a5a4bbd58058fa70250f5a88a83b8f8b8b50ea39ebf3d660f
ssdeep: 768:OslwGVFfiRx536uukAX/s7MInl11uVZnm4d9W:OQVFfiRjqupAvs7MInZk84dA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12AE2F1017FA0A2C0C585267263174830F5751ED38F537BB652B1DB9DCBBEB698C102E5
sha3_384: 89ab963ecea1a3d51e37fdbd7f7eb4335120e6ccd2a46b7a89c5783a093c07ececdafb25d25311a3ddaebd48a6462601
ep_bytes: b8cc5941005064ff3500000000648925
timestamp: 2007-11-15 07:01:12

Version Info:
0: [No Data]

Malware.AI.3801222779 also known as:

How to remove Malware.AI.3801222779?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.