Malware.AI.4260940038 removal

The Malware.AI.4260940038 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4260940038 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• NtSetInformationThread: attempt to hide thread from debugger
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• A process created a hidden window
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Uses Windows utilities for basic functionality
• Installs itself for autorun at Windows startup
• Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4260940038?

File Info:
name: 2B6A3A3175ED82E6428C.mlw
path: /opt/CAPEv2/storage/binaries/dc096b254cd8a8940e3c8bf119d089e57204e1a414fb2b5cd39f1684f3a5b2ae
crc32: E4F25D1C
md5: 2b6a3a3175ed82e6428c5c841c4da857
sha1: d42adb169c6697ce2882edbd86d9f42a58353d55
sha256: dc096b254cd8a8940e3c8bf119d089e57204e1a414fb2b5cd39f1684f3a5b2ae
sha512: 9e0e5bf09629053442f90b57ea4c0f698f64f2e59104e3422fc56f01a5c75531d9190c18006b4762c4d94c1b91712bb21a4342326c27748fdb0417e9170c2a75
ssdeep: 24576:5UJueAF6xnlrGSGeUz+7MguDyN+4AedNhDBzJ6oRE5sMg4jHJF7adRWiJAVfc2Cm:54ZxnlqkUC7yj4A6v6X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17625127B0B9D913FEA8A6AB530318204B7B7CD701408F14BE5D1A39C7258A7DA4C7D6B
sha3_384: e7b2898fd47093aeae9a35c5daf46192577a9f1b54ace2c22434086acc12cffe3c1565615979d56743a04e4fd580b582
ep_bytes: 68000000005e534a09d25f29d189ca01
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Malware.AI.4260940038 also known as:

How to remove Malware.AI.4260940038?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.