How to remove “Malware.AI.3923723410”?

The Malware.AI.3923723410 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3923723410 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• A process created a hidden window
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• A scripting utility was executed
• Uses Windows utilities for basic functionality
• Sniffs keystrokes
• Collects and encrypts information about the computer likely to send to C2 server
• Installs itself for autorun at Windows startup
• A script process created a new process
• CAPE detected the Remcos malware family
• Creates a copy of itself
• Creates known Remcos directories and/or files
• Creates known Remcos mutexes

How to determine Malware.AI.3923723410?

File Info:
name: 6B90F2BF645014897DE2.mlw
path: /opt/CAPEv2/storage/binaries/c7b13723ddcfd40d81587c588a316d871407558bb8a79355d622b9ca912a80a2
crc32: 10F46E75
md5: 6b90f2bf645014897de24014097a1de9
sha1: 8d55ba38071dfdf9b31819f2c22b7cd91fada620
sha256: c7b13723ddcfd40d81587c588a316d871407558bb8a79355d622b9ca912a80a2
sha512: e3826f6fad358f2a5740c264a6e826638e3f7abd6524b65bf6bdd85a9ff96144b95951b4832fcab23fe42d0aec4460e57de6bf9b49e755fc941406221b3ed722
ssdeep: 24576:bCdxte/80jYLT3U1jfsWanFqhOaczH6B9Q:yw80cTsjkWanFuOr7X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B135BE2273DDC370CB769173BF69B7012EBF78614630B85B2F881D79A950162162DBA3
sha3_384: b61fa2e42718838fb3dc2a2796a337cd1b4b0415d63784240834bbe6a6aa840acf8b5caf6b2499191fee26dcb8ce2ab8
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2018-02-02 17:15:55

Version Info:
Translation: 0x0809 0x04b0

Malware.AI.3923723410 also known as:

How to remove Malware.AI.3923723410?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.