Malware.AI.3849756296 removal tips

The Malware.AI.3849756296 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3849756296 virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Japanese
Authenticode signature is invalid

How to determine Malware.AI.3849756296?


File Info:
name: ECCE8AF238AA31027C5B.mlw
path: /opt/CAPEv2/storage/binaries/ee5466dab01075cd34be8642335813c927de2ffe0905743415b8886a9f938e48
crc32: E6771622
md5: ecce8af238aa31027c5bbe8d909ab92e
sha1: a51a1b13d15e643ce8e2b85f0e56b01023f0a887
sha256: ee5466dab01075cd34be8642335813c927de2ffe0905743415b8886a9f938e48
sha512: 7d6357bf58db39715cb8c28ee39018d41fbe98841f1030fc6a8d2aed1cfbd11a0e967ec8e2bf6b2afaea0646f923237efbc002988c309ef26c1edcfedf1b4473
ssdeep: 3072:OMssQNxJUJTxvK27QQEnq+ErxXx+5tbX8Y9KHnO2Hz:JQOkkxSsUynpH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D344B4AAFEC8C36E06217745C3726444ABD7D243A34C21BBB4C7849DF71770D9A63AA
sha3_384: 8dc4a785260df5f8d4f52e0136f35274be2c5548116b00238efecd6505290f920046096b92393dc6d1a4d7f12046b9ce
ep_bytes: 558bec83ec445356ff15949040008bf0
timestamp: 2001-09-05 09:23:23

Version Info:
CompanyName: InstallShield Software Corporation
FileDescription: InstallShield (R) Setup Launcher
InternalName: Setup
OriginalFilename: Setup.exe
FileVersion: 6, 31, 100, 1190
LegalCopyright: Copyright (C) 1990-2001 InstallShield Software Corporation
ProductName: InstallShield (R)
ProductVersion: 6, 31
Translation: 0x0409 0x04b0

Malware.AI.3849756296 also known as:

Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Gavir.17
ClamAV	Win.Trojan.Lineage-89
McAfee	Artemis!ECCE8AF238AA
Malwarebytes	Malware.AI.3849756296
CrowdStrike	win/malicious_confidence_70% (W)
APEX	Malicious
Kaspersky	UDS:Worm.Win32.Viking.y
Avast	Win32:Lineage-EJ [Trj]
Baidu	Win32.Virus.Agent.v
VIPRE	Trojan.Crypt.Delf.AF
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.ecce8af238aa3102
Sophos	Generic ML PUA (PUA)
Antiy-AVL	Worm/Win32.Viking.j
ZoneAlarm	UDS:Worm.Win32.Viking.y
Google	Detected
ALYac	Trojan.Crypt.Delf.AF
Cylance	unsafe
Ikarus	Trojan-PWS.Win32.Lineage.IG
AVG	Win32:Lineage-EJ [Trj]
DeepInstinct	MALICIOUS

How to remove Malware.AI.3849756296?

Malware.AI.3849756296 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X