Malware

Malware.AI.3945241805 removal

Malware Removal

The Malware.AI.3945241805 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3945241805 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Performs HTTP requests potentially not found in PCAP.
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Behavioural detection: Transacted Hollowing
  • CAPE detected the shellcode get eip malware family
  • Checks the version of Bios, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3945241805?


File Info:

name: D67274E15528B48F77A9.mlw
path: /opt/CAPEv2/storage/binaries/a3934d1cd4b83334aea04a1468e4fb358f1fcd2d92c8482fe14a067c9217fffc
crc32: 5B53C6D8
md5: d67274e15528b48f77a936d527439986
sha1: 9148feb7327bd4098fbc097cecfe492ea9117786
sha256: a3934d1cd4b83334aea04a1468e4fb358f1fcd2d92c8482fe14a067c9217fffc
sha512: 2fe9c85a4fdaa8e308c0732101135c7235f54a66760f047e606c3673640b2aaa5a9c856410bdfef2f8812c827c9721310e5455c7b9bced9f4feddf4b000da43e
ssdeep: 98304:VhgMKvZR4NVOQvZnHjPFvsQWYWb+/vLlNCv90287AngOg+C+ioJg8J9Rgy:8MkZGvOQv9HbFEE/vLb50gtRpoJh9+
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18B5623387381E462C04B91B73159A369009C7F3564BA889BBF957B0E6AF48D1ED33793
sha3_384: 68e25327adc461d7cef1c13ed1cd3af961055d17f81fc7e0941a3b77e4b35332b76245a7908fd9de66b771e9857c7787
ep_bytes: 558bec837d0c017505e855c10000ff75
timestamp: 2021-03-19 23:11:44

Version Info:

0: [No Data]

Malware.AI.3945241805 also known as:

BkavW32.AIDetectMalware
LionicAdware.Win32.Neoreklami.2!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.526630
ClamAVWin.Trojan.BrowserModifier-10006404-0
FireEyeGeneric.mg.d67274e15528b48f
SkyhighBehavesLike.Win32.PUPXTH.vc
McAfeeArtemis!D67274E15528
MalwarebytesMalware.AI.3945241805
VIPREGen:Variant.Razy.526630
SangforTrojan.Win32.Save.a
CrowdStrikewin/grayware_confidence_100% (D)
K7GWAdware ( 005ac06f1 )
K7AntiVirusAdware ( 005ac06f1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.Neoreklami.NV
APEXMalicious
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.Neoreklami.pef
BitDefenderGen:Variant.Razy.526630
AvastWin32:Evo-gen [Trj]
TencentWin32.AdWare.Neoreklami.Fflw
EmsisoftGen:Variant.Razy.526630 (B)
F-SecureHeuristic.HEUR/AGEN.1364222
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
IkarusPUA.Neoreklami
GoogleDetected
AviraHEUR/AGEN.1364222
Antiy-AVLGrayWare[AdWare]/Win32.Neoreklami
ArcabitTrojan.Razy.D80926
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Neoreklami.pef
GDataGen:Variant.Razy.526630
VaristW32/S-0e133c39!Eldorado
AhnLab-V3Trojan/Win.Generic.R608817
ALYacGen:Variant.Razy.526630
MAXmalware (ai score=84)
Cylanceunsafe
RisingTrojan.Generic@AI.100 (RDML:/BvTozfaCEcmGajhdHy2Xw)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/Neoreklami
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Malware.AI.3945241805?

Malware.AI.3945241805 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment