Malware

Malware.AI.3848051846 removal guide

Malware Removal

The Malware.AI.3848051846 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3848051846 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Creates an autorun.inf file
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Malware.AI.3848051846?


File Info:

name: 31D553EA85E31F3E1727.mlw
path: /opt/CAPEv2/storage/binaries/caae5abb7b2177cf9cfa196c749dc6cbbe2695381c1f8084d097e258804e6045
crc32: F23280DD
md5: 31d553ea85e31f3e17278be4c8b8fa29
sha1: a99c5d512ec2ca109abf569863c3730f5188ee71
sha256: caae5abb7b2177cf9cfa196c749dc6cbbe2695381c1f8084d097e258804e6045
sha512: da3e9e7f8cfe82b243c43083a0e2c7dbfe983a36d7edb25e6eadb8603483a806320b29516af3f8a56a5dc76b21fd1df00542b01c32c34fb11dec3ffcddf93f84
ssdeep: 3072:lYsaZczgeaV/CiL0ckxzFbTkwMtVsKDgI0qf/M:lY+EeaV/voXRF3kwwVxEIHXM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T131049DD2915768DDF302167C7C14C3534C969DA7E295A384B8B22F8D83E252F8A1BF4E
sha3_384: 4cf9cc70080c5346082ac50c9de2d70b18b373feadc4c33bc4daf162827f4d83ace6ab37726ba9ea7327e369325fe791
ep_bytes: 6a40680010000068a08601006a00ff15
timestamp: 2012-09-05 20:26:28

Version Info:

0: [No Data]

Malware.AI.3848051846 also known as:

BkavW32.AIDetect.malware1
LionicWorm.Win32.AutoRun.o!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Downloader.126
FireEyeGeneric.mg.31d553ea85e31f3e
ALYacGen:Variant.Downloader.126
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusEmailWorm ( 0052ca6a1 )
AlibabaWorm:Win32/AutoRun.4e39d8a7
K7GWEmailWorm ( 0052ca6a1 )
Cybereasonmalicious.a85e31
CyrenW32/Kryptik.AJG.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/AutoRun.Agent.AFG
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Worm.Win32.AutoRun.pef
BitDefenderGen:Variant.Downloader.126
AvastFileRepMalware
TencentWin32.Worm.Autorun.Lkdx
Ad-AwareGen:Variant.Downloader.126
SophosML/PE-A + Troj/Agent-BCGS
ComodoEmailWorm.Win32.AutoRun.KA@719dtc
DrWebWin32.HLLW.Autoruner3.499
TrendMicroTROJ_GEN.R002C0PL221
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
EmsisoftGen:Variant.Downloader.126 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Downloader.126
JiangminWorm.AutoRun.aziv
AviraTR/Crypt.XPACK.Gen
Antiy-AVLGrayWare/Win32.Agent.afg
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R295338
Acronissuspicious
McAfeeGenericRXLG-HR!31D553EA85E3
MAXmalware (ai score=88)
VBA32BScope.Worm.Autorun
MalwarebytesMalware.AI.3848051846
TrendMicro-HouseCallTROJ_GEN.R002C0PL221
RisingWorm.Autorun!1.AFBF (CLASSIC)
YandexTrojan.GenAsa!6D0EeHKQIts
IkarusVirus.Win32.Heur
eGambitUnsafe.AI_Score_99%
FortinetW32/Agent.AFG!tr
BitDefenderThetaAI:Packer.10D9AA541E
AVGFileRepMalware
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.3848051846?

Malware.AI.3848051846 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment