Malware

Should I remove “Malware.AI.3417403087”?

Malware Removal

The Malware.AI.3417403087 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3417403087 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Attempts to disable Windows Auto Updates
  • Attempts to modify Explorer settings to prevent hidden files from being displayed
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3417403087?


File Info:

name: B77FFE7A1613CA876445.mlw
path: /opt/CAPEv2/storage/binaries/4df7a1bfb93d95df396fbb009bb13a9eb7b846967e0a3cb47470af86f1e1b808
crc32: F05053C1
md5: b77ffe7a1613ca876445c513efc9e916
sha1: 797c0c35719574649aa1f0514c5a6ba457807022
sha256: 4df7a1bfb93d95df396fbb009bb13a9eb7b846967e0a3cb47470af86f1e1b808
sha512: 120c8afceaae4ba76ae99914c6dc41883fd3acc843cf1f755480abc49fac18073891842f75ecee3893a7c65ab528eb2f4a627e8905913924931b0b3fa61ca592
ssdeep: 1536:zOM9l02OnFzJii6Hf8O6j6/t66366Z6Jz36s6eA66KD6sqG/Oj9h6FA8HxAH6xMl:KT2OnFFSkAz0jH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169842E57E7812072E69A613DA3D2C6B335BEF028CD7B94CA992421EC4CE9D7014EE753
sha3_384: 036f3a225e949e83b9d6aca33770fcf760a8d3b6865b8f53c1f694196ce5b9422e8f9c67e496b77627aeca8d9173d407
ep_bytes: 68e8124000e8eeffffff000000000000
timestamp: 2000-01-24 11:01:17

Version Info:

0: [No Data]

Malware.AI.3417403087 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.GenericKDZ.96141
CAT-QuickHealW32.Virut.G
McAfeeGenericRXUP-MN!B77FFE7A1613
MalwarebytesMalware.AI.3417403087
VIPRETrojan.GenericKDZ.96141
SangforTrojan.Win32.Save.a
K7AntiVirusEmailWorm ( 003c363a1 )
K7GWEmailWorm ( 003c363a1 )
CrowdStrikewin/malicious_confidence_100% (W)
BaiduWin32.Worm.VB.ai
VirITTrojan.Win32.X-Cryptor.GDM
CyrenW32/Vobfus.O.gen!Eldorado
SymantecW32.Changeup!gen20
Elasticmalicious (high confidence)
ESET-NOD32Win32/AutoRun.VB.AWE
APEXMalicious
ClamAVWin.Trojan.VB-1629
KasperskyTrojan.Win32.Vobfus.kfd
BitDefenderTrojan.GenericKDZ.96141
NANO-AntivirusTrojan.Win32.Vobfus.chzvil
AvastWin32:VB-ADBB [Trj]
TencentTrojan.Win32.Vobfus.haq
EmsisoftTrojan.GenericKDZ.96141 (B)
F-SecureTrojan.TR/Jorik.Vobfus.ec.j
DrWebWin32.HLLW.Autoruner1.16354
TrendMicroTROJ_GEN.R03BC0CER23
McAfee-GW-EditionBehavesLike.Win32.Generic.fz
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.b77ffe7a1613ca87
SophosML/PE-A
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKDZ.96141
JiangminTrojan/Vobfus.sqy
GoogleDetected
AviraTR/Jorik.Vobfus.ec.j
MAXmalware (ai score=85)
Antiy-AVLWorm/Win32.WBNA.gen
ArcabitTrojan.Generic.D1778D
ViRobotTrojan.Win32.A.Vobfus.131072.P
ZoneAlarmTrojan.Win32.Vobfus.kfd
MicrosoftWorm:Win32/Vobfus.FH
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Vobfus.R507001
BitDefenderThetaGen:NN.ZevbaF.36196.wuZ@ayZxbUl
ALYacTrojan.GenericKDZ.96141
TACHYONTrojan/W32.VB-Vobfus.372736.B
VBA32TScope.Trojan.VB
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallTROJ_GEN.R03BC0CER23
RisingWorm.Win32.FakeFolder.bk (CLASSIC)
IkarusTrojan.Patched
FortinetW32/Jorik.EGLG!tr
AVGWin32:VB-ADBB [Trj]
Cybereasonmalicious.a1613c
DeepInstinctMALICIOUS

How to remove Malware.AI.3417403087?

Malware.AI.3417403087 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment