Malware

How to remove “Malware.AI.4234092948”?

Malware Removal

The Malware.AI.4234092948 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4234092948 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4234092948?


File Info:

name: 3E878C78E3201B8F0AAE.mlw
path: /opt/CAPEv2/storage/binaries/31af31f0f393d88685b0b92d13380fa74699dce9373573dd4177ae424f12a655
crc32: 819EFEF4
md5: 3e878c78e3201b8f0aaee47d87223251
sha1: 1d2b2a9078d6c4157dcb080f06f104e1cc767da9
sha256: 31af31f0f393d88685b0b92d13380fa74699dce9373573dd4177ae424f12a655
sha512: 0f9ce141f3e7449c156a5588feadb87938da6690f1aa73bf4524ba8fb805d576a6929b8078ee58f25bd18b920922dca3ccb02cb503f364f9060fa138bd3e76f4
ssdeep: 12288:8HLUMuiv9RgfSjAzRty26xGJeMTE3Z2ap4srKWLZ6JCtXZYJfmZ:WtARD6EAMC41o6JfmZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4E4234BAE47AA39EF9067309908851D2157AF33BDB4D29B4340B61E637FA873C75C12
sha3_384: 2221f79fbb6f0e1bc2324acae2daa53e6d2084b3f1308a2d9bca2c04107fd7ad2ac6c666b986e758705f15b5da4821e1
ep_bytes: 60be00c046008dbe0050f9ff5783cdff
timestamp: 2008-12-24 09:00:07

Version Info:

FileDescription:
FileVersion: 3, 3, 0, 0
CompiledScript: AutoIt v3 Script : 3, 3, 0, 0
Translation: 0x0809 0x04b0

Malware.AI.4234092948 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
DrWebTrojan.DownLoader46.45975
MicroWorld-eScanAIT:Trojan.Nymeria.5347
Cylanceunsafe
APEXMalicious
BitDefenderAIT:Trojan.Nymeria.5347
AvastFileRepMalware [Misc]
VIPREAIT:Trojan.Nymeria.5347
EmsisoftAIT:Trojan.Nymeria.5347 (B)
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitAIT:Trojan.Nymeria.D14E3 [many]
GDataAIT:Trojan.Nymeria.5347 (3x)
MalwarebytesMalware.AI.4234092948
SentinelOneStatic AI – Malicious PE
MaxSecureWorm.Win32.AutoIt.QN
AVGFileRepMalware [Misc]

How to remove Malware.AI.4234092948?

Malware.AI.4234092948 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment