What is “Malware.AI.965437211”?

The Malware.AI.965437211 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.965437211 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• HTTPS urls from behavior.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Installs itself for autorun at Windows startup
• Attempts to modify proxy settings
• Harvests cookies for information gathering

How to determine Malware.AI.965437211?

File Info:
name: DC3E1965D5C3A3A803B3.mlw
path: /opt/CAPEv2/storage/binaries/01b1591cd2368b41a2d59521ce7f5f0726abd7693da2eb424f1587f3a72114ee
crc32: 4C7C48CE
md5: dc3e1965d5c3a3a803b37ca7d9fc2673
sha1: 0fb857480d82ec6276e31d10775975939cf32f1f
sha256: 01b1591cd2368b41a2d59521ce7f5f0726abd7693da2eb424f1587f3a72114ee
sha512: 6391f790312d958d1cdaf5d899c86ce9a1994a8c4b14bcb3dbeb98b2e0a639026a522439649f1b2014664c1e3e51c61342dd1a6aacfe0b5d6922b56037df2f8e
ssdeep: 1536:ysnYr5dYbuVjajSjJm95llPFct+faAoUt+Qeg6TKVbXNXaBwpkzeqHaQvMzhzYPS:3njbSVylFctTB9utwwGraQIBYPS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179D3D012B801D473D80A417A096BDA812B7BAD311AB9798377FE3E4B5D313E44F6B25C
sha3_384: 6de0c9fd3843d24e286894e92fee561d94baba6319b3483ef68b9049bf86a8ba11368882c334aa8393c5a13a6b981565
ep_bytes: e8c21d0000e917feffff558bec515153
timestamp: 2011-02-26 17:36:36

Version Info:
0: [No Data]

Malware.AI.965437211 also known as:

How to remove Malware.AI.965437211?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.