Malware

Malware.AI.4234346966 removal tips

Malware Removal

The Malware.AI.4234346966 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4234346966 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses suspicious command line tools or Windows utilities
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4234346966?


File Info:

name: B303120EA47166C93BB5.mlw
path: /opt/CAPEv2/storage/binaries/d55c2e75042579552b9baac290c6652c9f2f2e817f3ab29d5bc90530fe134ca1
crc32: B60C41F9
md5: b303120ea47166c93bb5e735b6e0aa4a
sha1: db577733ef7c3825d35a0433ee9ec6b756ce743b
sha256: d55c2e75042579552b9baac290c6652c9f2f2e817f3ab29d5bc90530fe134ca1
sha512: 8882166dd06572020ef0895af6abf2e69d9ee25ae3b2eeaf8efe8666b50d1725564a20d953b101a9101c65ae0ddc2aa03e7571e9f120a9b60ac5fb626b3a4243
ssdeep: 98304:MSMH+CmLWGYRJamO72ND2PM784sIKgsnXsu6nnNTjgXxwdx3AJmE5QtMOFoTPhtn:pMH9mLWGAamOK2PS8TFnXsRjgBIOGtM3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB463349874397F3EC70E9B04C7E7E6AC035795A8F336D3A9AD89CC2422A7D2564436C
sha3_384: d4d1722f58a1a0b805322bf9ce3606defe38359cf4140f3344083ae66d0691ccc495406e793218bc15ccbb57a961847f
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: PlSoft
FileDescription: File Shredder Setup
FileVersion:
LegalCopyright:
Translation: 0x0409 0x04e4

Malware.AI.4234346966 also known as:

MalwarebytesMalware.AI.4234346966
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
McAfee-GW-EditionBehavesLike.Win32.ObfuscatedPoly.tc
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojanDownloader.GCleaner.oq
AviraHEUR/AGEN.1251208
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
FortinetW32/Agent.SLC!tr
AVGFileRepMalware [Adw]
AvastFileRepMalware [Adw]

How to remove Malware.AI.4234346966?

Malware.AI.4234346966 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment