Malware

How to remove “Malware.AI.3914051035”?

Malware Removal

The Malware.AI.3914051035 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3914051035 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location

How to determine Malware.AI.3914051035?


File Info:

name: 8145FB745D9EE6254EF4.mlw
path: /opt/CAPEv2/storage/binaries/23aad6b40c26904f19eab43c7877ea6c00a96eb2f491a5be3a0168e8aeeb278f
crc32: 2AB7D1C4
md5: 8145fb745d9ee6254ef49d5f670a82f9
sha1: a7b2c2e2c4ce5662671c7d32d8166bf0e1f7ae5f
sha256: 23aad6b40c26904f19eab43c7877ea6c00a96eb2f491a5be3a0168e8aeeb278f
sha512: 2763d440ad6f5c96c471bdabd30b5d17359122646fc6b84f127ab9af920ff99846ef8c6f0f98442848ca81ff8699ff17ce4026018ed25b4406e82e9198e73b50
ssdeep: 12288:NxmIJQvPkitEqZR3ptq+fTvf+F7oNEUvFcZK4UXfQsJWfFUFr4A862ITQ5TJ:rmoO8itEqfZz7QoNEUCDGJ4houTJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4E40212BBD080B1E5726D315929FB04AA3CB9340E24DA6FB3D40D5DDE70591A632FB3
sha3_384: 7e84b405833bb1109b541c6d75cb7ec0152159cdaf3ee103913bc31a4e292dbb2094deda7611058a0495f8be2440033b
ep_bytes: e88a040000e98efeffff3b0db8a14300
timestamp: 2017-08-11 13:54:06

Version Info:

0: [No Data]

Malware.AI.3914051035 also known as:

BkavW32.AIDetect.malware1
DrWebBackDoor.Tordev.976
MicroWorld-eScanGeneric.Starter.4.6C506C11
FireEyeGeneric.mg.8145fb745d9ee625
ALYacTrojan.Inject.AUZ
CylanceUnsafe
SangforBackdoor.Win32.DarkKomet.ibyb
K7AntiVirusTrojan ( 0058aa1a1 )
AlibabaBackdoor:Win32/DarkKomet.490769e3
K7GWTrojan ( 0058aa1a1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/S-5f21cf29!Eldorado
SymantecBackdoor.Graybird
ESET-NOD32a variant of Generik.KJZTJPB
TrendMicro-HouseCallTROJ_GEN.R002H0CKJ21
Paloaltogeneric.ml
ClamAVWin.Dropper.DarkKomet-9368690-0
KasperskyBackdoor.Win32.DarkKomet.ibyb
BitDefenderGeneric.Starter.4.6C506C11
NANO-AntivirusTrojan.Win32.DarkKomet.fhnxwy
AvastWin32:Trojan-gen
TencentTrojan.Win32.BitCoinMiner.la
SophosMal/Generic-S
ComodoMalware@#cwkohzv0cvay
McAfee-GW-EditionBehavesLike.Win32.Dropper.jc
EmsisoftGeneric.Starter.4.6C506C11 (B)
IkarusTrojan.SuspectCRC
AviraBDS/DarkKomet.vndya
MicrosoftBackdoor:Win32/Fynloski
GDataTrojan.Inject.AUZ
CynetMalicious (score: 99)
McAfeeArtemis!8145FB745D9E
MAXmalware (ai score=84)
VBA32Backdoor.DarkKomet
MalwarebytesMalware.AI.3914051035
APEXMalicious
FortinetW32/DarkKomet.IBYB!tr.bdr
AVGWin32:Trojan-gen
Cybereasonmalicious.45d9ee
PandaTrj/CI.A
MaxSecureWin.MxResIcn.Heur.Gen

How to remove Malware.AI.3914051035?

Malware.AI.3914051035 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment