Categories: Malware

Should I remove “Malware.AI.1970342207”?

The Malware.AI.1970342207 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1970342207 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.1970342207?


File Info:

name: 3BFA9FF574410753AA0C.mlwpath: /opt/CAPEv2/storage/binaries/ebda9de8856d08f439b701b8b4c3311574e7ca78485b76ab3b6b514789b84f63crc32: 9AF644AAmd5: 3bfa9ff574410753aa0c4c2c0074ddfdsha1: 0a44ca3c16961f1e4b992ce7f3fd273e42ef476asha256: ebda9de8856d08f439b701b8b4c3311574e7ca78485b76ab3b6b514789b84f63sha512: 994a35075ed1c881aef86c69fa2528a8d9b1ba053969b48d341f41c74af9a95ca7f39119732be0a5297c7c5b5f168e1b5faab882742846912e65a9991aa5c6e5ssdeep: 49152:yUITFQ4hjZjdIgvKZ/QTIHxxaD0JBV1Ls2wB5JBV1Ls2wBm:yUehH98vY1ymtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C2A5BF4AA3A0519DE6E3C179C262A363FA31742D07209BEB63944BF56B13ED09F3D351sha3_384: 166ba09563584a88cba6f2b39cd1978fa61a39ae47c3c68bdc4267b8ba2efa7c29d7c8976551e5af068c15835f71e2ebep_bytes: 68a800000068000000006850936000e8timestamp: 2018-08-10 20:01:45

Version Info:

0: [No Data]

Malware.AI.1970342207 also known as:

Bkav W32.AIDetect.malware2
Lionic Heuristic.File.Generic.00×1!p
FireEye Generic.mg.3bfa9ff574410753
McAfee Artemis!3BFA9FF57441
Cylance Unsafe
Sangfor Virus.Win32.Save.a
K7AntiVirus Unwanted-Program ( 0050cb4e1 )
K7GW Unwanted-Program ( 0050cb4e1 )
BitDefenderTheta Gen:NN.ZexaF.34592.gwX@aWXSZjci
Cyren W32/GameHack.AH.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/GameHack.EVN potentially unsafe
Paloalto generic.ml
ClamAV Win.Malware.Gamehack-6847638-0
Cynet Malicious (score: 100)
APEX Malicious
Emsisoft Application.GameHack (A)
McAfee-GW-Edition BehavesLike.Win32.Generic.vc
Sophos Generic ML PUA (PUA)
Ikarus Trojan.Win32.Occamy
Antiy-AVL Trojan/Generic.ASMalwS.5213
GData Win32.Application.PSE.11423CR
Google Detected
AhnLab-V3 PUP/Win32.Helper.R240933
Acronis suspicious
VBA32 Trojan.Downloader
Malwarebytes Malware.AI.1970342207
Rising PUF.GameHack!1.B348 (CLASSIC)
Yandex Trojan.GenAsa!bJnf0WOlY7w
SentinelOne Static AI – Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/GameHack.A7832C08!tr
CrowdStrike win/grayware_confidence_100% (W)

How to remove Malware.AI.1970342207?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Malware.AI.3454153382 information

The Malware.AI.3454153382 is considered dangerous by lots of security experts. When this infection is active,…

13 mins ago

Midie.100502 removal tips

The Midie.100502 is considered dangerous by lots of security experts. When this infection is active,…

53 mins ago

Malware.AI.3915743673 (file analysis)

The Malware.AI.3915743673 is considered dangerous by lots of security experts. When this infection is active,…

59 mins ago

Malware.AI.2034266737 removal

The Malware.AI.2034266737 is considered dangerous by lots of security experts. When this infection is active,…

59 mins ago

Trojan.Win32.Agent.xbmkmt removal tips

The Trojan.Win32.Agent.xbmkmt is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

About “MSIL/Kryptik.ALNP” infection

The MSIL/Kryptik.ALNP is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago