Should I remove “Malware.AI.3955626241”?

The Malware.AI.3955626241 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3955626241 virus can do?

Dynamic (imported) function loading detected
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.3955626241?


File Info:
name: E52273F6C992181CAFF2.mlw
path: /opt/CAPEv2/storage/binaries/d32cb7175ade68d3237e9e5d07eb799fe31760d58eae6afde06dabeb8fdfe759
crc32: EED8AB7F
md5: e52273f6c992181caff2221b04542290
sha1: 0bce4393a3c46eb5f08a36b73b9a35aed878a991
sha256: d32cb7175ade68d3237e9e5d07eb799fe31760d58eae6afde06dabeb8fdfe759
sha512: a40d4a393caf5a77c66211c4c45c6b087188957a41a623ec86b4eaee1395bf60b7bc7abc681604daf08c5e1b95d1e8c85ac434d496e3727e85328aea05dd02b9
ssdeep: 1536:wCGhDjYG/XsaRy5VG6TBJ1MOkVldbrpPpGU3z:KDjYGW5US1MOkVnyU3
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1F6C3318E7518CCC5D18ACF362100AF7D61BAD472D906CDAEE5AC0837E3F9B916A4D21D
sha3_384: 1a3fa04fa4c8391e0cefd546b3b72c6ccab0a66f72cbfd49adf45776e84eda08ad9afaef8f699fa89d15e6290bee71b4
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-11-19 18:27:48

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: teohook
FileVersion: 1.0.0.0
InternalName: teohook.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: teohook.exe
ProductName: teohook
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3955626241 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.809492
McAfee	Artemis!E52273F6C992
Alibaba	TrojanDropper:MSIL/Generic.8e37da6e
Symantec	Trojan.Gen.MBT
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Dropper.MSIL.Sysn.gen
BitDefender	Gen:Variant.Bulz.809492
Avast	Win64:TrojanX-gen [Trj]
Tencent	Msil.Trojan-dropper.Sysn.Ahxq
Ad-Aware	Gen:Variant.Bulz.809492
Sophos	Mal/Generic-R
TrendMicro	TROJ_GEN.R002C0WKM21
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Bulz.809492
Emsisoft	Gen:Variant.Bulz.809492 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.809492
Avira	TR/Drop.Sysn.ahdym
Gridinsoft	Ransom.Win64.Wacatac.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
VBA32	TrojanDropper.MSIL.Sysn
ALYac	Gen:Variant.Bulz.809492
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3955626241
TrendMicro-HouseCall	TROJ_GEN.R002C0WKM21
Fortinet	PossibleThreat
AVG	Win64:TrojanX-gen [Trj]

How to remove Malware.AI.3955626241?

Malware.AI.3955626241 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X