Malware

Malware.AI.4287963068 (file analysis)

Malware Removal

The Malware.AI.4287963068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4287963068 virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Malware.AI.4287963068?


File Info:

name: 3ACB91E4D9DB5CEB9C18.mlw
path: /opt/CAPEv2/storage/binaries/d6ec6a513e660009ee209007b2794705b8907172fcb63402fb4636e1be2fb936
crc32: 9CEDC636
md5: 3acb91e4d9db5ceb9c1840478127acd8
sha1: 772b0511322d0251c7760628b455aee3e9b48855
sha256: d6ec6a513e660009ee209007b2794705b8907172fcb63402fb4636e1be2fb936
sha512: a2ebe7867337d87e77ea09462930235c82aff040b11bc8fdbe3b736d0a46ceb87eee5b01aa5cd39b87008c6f665c0869a3b9b3433be963e9528e9dc2dba6177a
ssdeep: 98304:9W5ym4dsSrnUo13vNlmunBWbpsEheIWj40:9WEtbrUo13Fg6B+DAIWj40
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A9063352188A2E33E577D5351B32D2D2E6B6EC3E16D1889B53F32E97315F070261EB28
sha3_384: d686bf54b0ce7ed46e0637bf34eedd94ceced7f313b6d93c64b359742fbd8be1c6cc61cbacc15234347eab6841b739d6
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:

Comments: DesktopAnimated.com
CompanyName: DesktopAnimated.com
FileDescription: Endless Color Animated Wallpaper
FileVersion: 1.0.0.0
InternalName: Endless Color Animated Wallpaper.exe
LegalCopyright: Copyright (c) 2018 DesktopAnimated.com
LegalTrademarks: Copyright (c) 2018 DesktopAnimated.com
OriginalFilename: Endless Color Animated Wallpaper.exe
ProductName: Endless Color Animated Wallpaper
ProductVersion: 1.0.0.0
Translation: 0x0000 0x04e4

Malware.AI.4287963068 also known as:

LionicTrojan.Win32.Scar.4!c
MicroWorld-eScanTrojan.GenericKD.12771967
FireEyeTrojan.GenericKD.12771967
McAfeeArtemis!3ACB91E4D9DB
MalwarebytesMalware.AI.4287963068
SangforTrojan.Win32.Scar.qpbu
AlibabaTrojan:Win32/Slithermon.49d7d7cd
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Slithermon.A
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Scar.qpbu
BitDefenderTrojan.GenericKD.12771967
AvastWin32:Malware-gen
TencentWin32.Trojan.Scar.Lnex
Ad-AwareTrojan.GenericKD.12771967
EmsisoftTrojan.GenericKD.12771967 (B)
DrWebTrojan.MulDrop7.61050
ZillyaTrojan.Scar.Win32.108251
TrendMicroTROJ_GEN.R002C0PIO21
McAfee-GW-EditionBehavesLike.Win32.Vopak.wc
SophosMal/Generic-S
IkarusTrojan.Scar
GDataTrojan.GenericKD.12771967
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacTrojan.GenericKD.12771967
MAXmalware (ai score=82)
VBA32Trojan.Scar
TrendMicro-HouseCallTROJ_GEN.R002C0PIO21
SentinelOneStatic AI – Suspicious PE
FortinetW32/GE.C2D6FA50!tr
AVGWin32:Malware-gen
PandaTrj/CI.A

How to remove Malware.AI.4287963068?

Malware.AI.4287963068 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment