About “Malware.AI.4189080659” infection

The Malware.AI.4189080659 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4189080659 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4189080659?

File Info:
name: 031B6AD0CA148D19E851.mlw
path: /opt/CAPEv2/storage/binaries/a3f021d79947d0e4817af5f487bf8ff87e45d6526fd85054b5deb8b8632725c9
crc32: 88A8E76E
md5: 031b6ad0ca148d19e8512c766dad87ec
sha1: a42a3f1164e77e7524074a44e6af31aafa5acb94
sha256: a3f021d79947d0e4817af5f487bf8ff87e45d6526fd85054b5deb8b8632725c9
sha512: 1b03775526f3ac17545057e4effb166418ffaa8fb1ee3b1dfafddf94332a7af42eca9947b7fa8e52596725052ede5a8b4af0064f61c627313d66ec2d622d57a9
ssdeep: 12288:gL0sIYwnWTRW8fdeHyki44X8xmG4ttC7ERkfCR:G0sBwWTRW8fdeSkhM7tA7ykw
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17FD4DF00FB96A0B6DDA512738A6AA36DC1FE65205F3447D3E3CD6F2D9A600D29C317C6
sha3_384: 27bdd2300aabd09e3b42c954b9a62682d9df87e0c15e620b3aa3c38b20e3426b04179fb0b570b28b88e9330305bde3b4
ep_bytes: e8f6c8feffe991feffffccff25f0a343
timestamp: 2016-10-28 09:24:38

Version Info:
CompanyName: Adobe Systems Incorporated
FileDescription: LogTransport Application
FileVersion: 7.1.1.3403
InternalName: LogTransport2
LegalCopyright: Copyright 2008-15 Adobe Systems Incorporated. All rights reserved.
OriginalFilename: LogTransport2.exe
PrivateBuild: 7.1.1.3403
ProductName:  LogTransport Application
ProductVersion: 7.1.1.3403
Translation: 0x0409 0x04b0

Malware.AI.4189080659 also known as:

How to remove Malware.AI.4189080659?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.