Malware.AI.3389379563 removal guide

The Malware.AI.3389379563 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3389379563 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3389379563?


File Info:
name: D6AEBF92F2505059121F.mlw
path: /opt/CAPEv2/storage/binaries/174fdd1b2619ea93ac1ead7e38c41c15596efc407d426890ea622c2e5887b959
crc32: B185C3F9
md5: d6aebf92f2505059121f4855bbe6624a
sha1: f42c08f55f1bf5239172adf95e5309b45e385b4b
sha256: 174fdd1b2619ea93ac1ead7e38c41c15596efc407d426890ea622c2e5887b959
sha512: 63fce978d9fa88960dddef5a95f18c337ff6e0598f7379376ec1e7369ab4955568c665f5cb1baf25fdf9d3a56aaaabbabdce76da3c5985b1527abd6467fba805
ssdeep: 384:ZasOTSjdV3JNHJK7mlu3syRzWrhEjKonrKD1kA5jKDOpxsTyfmhZ:fOejdHNH4QMoh8Koink1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T114233A37F6C04846D0D09132419ACB39063EBD23DA64A696A3D07E5F3E327E2DE2535B
sha3_384: bbc351f891a7ab94ae0f7c2274efadd5f20e5147948f052a6b1c257c7fc9c5f34a227eb1ab32dd21b1c13b8bbdd3f460
ep_bytes: e8000000005883e805505f578bf781ef
timestamp: 2010-02-13 01:32:24

Version Info:
0: [No Data]

Malware.AI.3389379563 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.Multibar.28
FireEye	Generic.mg.d6aebf92f2505059
Skyhigh	BehavesLike.Win32.Infected.pt
McAfee	Artemis!D6AEBF92F250
Malwarebytes	Malware.AI.3389379563
Sangfor	Trojan.Win32.Agent.Vjqx
CrowdStrike	win/malicious_confidence_70% (D)
Arcabit	Trojan.Application.Multibar.28
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Application.Multibar.28
Emsisoft	Gen:Variant.Application.Multibar.28 (B)
VIPRE	Gen:Variant.Application.Multibar.28
Jiangmin	Win32/Virut.gen
Webroot	W32.Gen.BT
Antiy-AVL	GrayWare/Win32.Kryptik.ffp
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Malgent
GData	Gen:Variant.Application.Multibar.28
ALYac	Gen:Variant.Application.Multibar.28
MAX	malware (ai score=90)
Cylance	unsafe
Zoner	Probably Heur.ExeHeaderL
Rising	Trojan.Generic@AI.100 (RDML:njObjfS4UVSrEFdVZ5wjKg)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7164915.susgen
BitDefenderTheta	Gen:NN.ZexaF.36608.duW@aC6rqWai
Cybereason	malicious.55f1bf
DeepInstinct	MALICIOUS

How to remove Malware.AI.3389379563?

Malware.AI.3389379563 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X