Malware.AI.3202100038 removal

The Malware.AI.3202100038 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3202100038 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3202100038?


File Info:
name: 8D8BA3CDF7FC4096CCAB.mlw
path: /opt/CAPEv2/storage/binaries/d1099be8b97771ad3bd1b67dfd7e1f2f27e8275a1ee7423d79d102e99c6561ac
crc32: 4FA80BAB
md5: 8d8ba3cdf7fc4096ccab7f32b7b70bc0
sha1: 2000e0e9659a1f3d901864a7f6d375de82b9d6db
sha256: d1099be8b97771ad3bd1b67dfd7e1f2f27e8275a1ee7423d79d102e99c6561ac
sha512: 486cd7da4258880d38f5bb444c2aa01eb8156d187705a6303f9ae33b0ffc0ff9a3649319b361806be851a1f11403e07342d34453e5ecda1d877b37e8c4ab7965
ssdeep: 24576:6mt5nOVrTnlvbuhZUTdI2A42SqoTo6UNo+NRdyuNA0EMzTAoZNEdp:6I5UrNbw2A8qoTo6UNo+NRdyuNA0EMzw
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18815DF9073504783E2AF4B7F52420763A67B065ED59B0ED82D0550B73A01BAD8E2FDEB
sha3_384: 555626b78e54ddec9b8ccb401044582130a8214769eb13cb07a60b9512c4bffb8092ea273be1250cbb349f02ba4098c1
ep_bytes: ff250020400000000000000000000000
timestamp: 2061-01-06 00:51:53

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: BananaEvolutionWasteComplicationBeliefResignRedeemWasteConceive.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: BananaEvolutionWasteComplicationBeliefResignRedeemWasteConceive.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3202100038 also known as:

Lionic	Riskware.Win32.Fochi.1!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fochi.Bulz.51
FireEye	Gen:Variant.Fochi.Bulz.51
ALYac	Gen:Variant.Fochi.Bulz.51
Sangfor	Fochi.Win32.Bulz.51
K7AntiVirus	Riskware ( 00577a7c1 )
Alibaba	RiskWare:MSIL/BloodHound.d57e3618
K7GW	Riskware ( 00577a7c1 )
Cybereason	malicious.df7fc4
BitDefenderTheta	Gen:NN.ZemsilF.34182.1m0@auyKcHk
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.BloodHound.D
TrendMicro-HouseCall	TROJ_GEN.R002C0PAF22
ClamAV	Win.Packed.Razy-9740249-0
BitDefender	Gen:Variant.Fochi.Bulz.51
Avast	Win32:MiscX-gen [PUP]
Tencent	Win32.Trojan.Fochi.Edod
Ad-Aware	Gen:Variant.Fochi.Bulz.51
Zillya	Tool.BloodHound.Win32.353
TrendMicro	TROJ_GEN.R002C0PAF22
McAfee-GW-Edition	RDN/Generic.dx
Emsisoft	Gen:Variant.Fochi.Bulz.51 (B)
GData	Gen:Variant.Fochi.Bulz.51
Avira	HEUR/AGEN.1144210
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C4277594
McAfee	RDN/Generic.dx
Malwarebytes	Malware.AI.3202100038
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
Fortinet	Malicious_Behavior.SB
AVG	Win32:MiscX-gen [PUP]
MaxSecure	Trojan.Malware.119345792.susgen

How to remove Malware.AI.3202100038?

Malware.AI.3202100038 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X