How to remove “Malware.AI.4268664332”?

The Malware.AI.4268664332 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4268664332 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• At least one process apparently crashed during execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Loads a driver
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Enumerates running processes
• Attempts to modify Internet Explorer’s start page
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Queries information on disks, possibly for anti-virtualization
• Attempts to stop active services
• Network activity contains more than one unique useragent.
• Installs itself for autorun at Windows startup
• Attempts to modify proxy settings

How to determine Malware.AI.4268664332?

File Info:
name: C02CF5BD6D396212DC7D.mlw
path: /opt/CAPEv2/storage/binaries/3f161b5681b4e2ed4a233d4d88b60585a3ba6464e3f7c97816185b0ffa1a133a
crc32: 3E4B516F
md5: c02cf5bd6d396212dc7d58e99fd8a29a
sha1: 3b7cce3e9eae9673fbb5b163f7e563441235e9d1
sha256: 3f161b5681b4e2ed4a233d4d88b60585a3ba6464e3f7c97816185b0ffa1a133a
sha512: d51a3c5f28e43427b8ad3f5e6da4b78d66443f24de13a7f25856739ecd28d2e54fd5819bfa9bb44626dae1992f02def11f38312674141673f3115e4086a05b82
ssdeep: 49152:kiGp2XTd5KSfBgEKkZdgzwfaRmamBIKR0U0kk:tGmTd5/gEnBiUB0fkk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ABC53382B024C492D8A651F3D9C9EBF81A237C9EEB568467B0F17E0F31371D71A2AD51
sha3_384: 6a500a30615b594f9d235c0dbfde52553fff80eabbbdf9ecffb2e2c545c5baccb34125bcb49fd157c3155a46a1c20d2e
ep_bytes: 60be00e06a008dbe0030d5ff5789e58d
timestamp: 2021-12-13 16:48:05

Version Info:
0: [No Data]

Malware.AI.4268664332 also known as:

How to remove Malware.AI.4268664332?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.