Malware.AI.3419373609 (file analysis)

The Malware.AI.3419373609 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3419373609 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.3419373609?


File Info:
name: 554FC77F3FE8DA50AEB9.mlw
path: /opt/CAPEv2/storage/binaries/2d9e940675bb6295b4d86055c6967977969c32e0608bc63c37337a1330cc5919
crc32: 6248FBA6
md5: 554fc77f3fe8da50aeb91181a030d00c
sha1: a86d10e7c979a8cf213c6b439c2e87b915c6cde5
sha256: 2d9e940675bb6295b4d86055c6967977969c32e0608bc63c37337a1330cc5919
sha512: 9c5b4a6ddfdcffbb6c30fa5b35d81c8fcc0a136c08a738cf3d13de52656a422e2bc14540f5f162ac49bf541906844a703826ff69a4095a0ca529bec822fd8e23
ssdeep: 3072:wJwaCd0tilzfxN8/KuM8k6Hnf8RTrtznN3mN7wzD2vzg8RhjpG/KevzSiVvLwnYJ:OwqGx1/6/8H89G/QivL2YQ7qtTB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17684F0A9DFA1E94BF99050B2666DC392300177315999B007B3C4DF5EA2302F6CA97F1B
sha3_384: 443bbaab3a991cdf2a4cadd679af50d2544097081581cf5a5950e43d4894d693f3394c8ca0cc0505fe53a88c237ab5e2
ep_bytes: 558bec6aff688081450068f62b450064
timestamp: 1970-05-28 14:55:15

Version Info:
Comments: 
CompanyName: 
FileDescription: ExeBinder Microsoft 基础类应用程序
FileVersion: 1, 0, 0, 1
InternalName: ExeBinder
LegalCopyright: 版权所有 (C) 2005
LegalTrademarks: 
OriginalFilename: ExeBinder.EXE
PrivateBuild: 
ProductName: ExeBinder 应用程序
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0804 0x04b0

Malware.AI.3419373609 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.62227461
FireEye	Generic.mg.554fc77f3fe8da50
ALYac	Trojan.GenericKD.62227461
Cylance	Unsafe
Zillya	Adware.Eorezo.Win32.26327
Sangfor	Trojan.Win32.Agent.Vaov
K7AntiVirus	Trojan ( 005895201 )
Alibaba	Backdoor:Win32/IRCBot.910d5143
K7GW	Trojan ( 005895201 )
Cybereason	malicious.f3fe8d
BitDefenderTheta	Gen:NN.ZexaF.34698.xq0@am3P9Lob
VirIT	Backdoor.Win32.Unkbot.UI
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R002C0PIN22
Paloalto	generic.ml
ClamAV	Win.Worm.Uhrahu-1
BitDefender	Trojan.GenericKD.62227461
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Trojan.Generic@AI.89 (RDML:3hoZjBV0mnZHG991BWYeow)
Ad-Aware	Trojan.GenericKD.62227461
Emsisoft	Trojan.GenericKD.62227461 (B)
DrWeb	BackDoor.IRC.Unkbot.528
VIPRE	Trojan.GenericKD.62227461
TrendMicro	TROJ_GEN.R002C0PIN22
McAfee-GW-Edition	GenericR-IDA!554FC77F3FE8
Sophos	Generic PUA KI (PUA)
Ikarus	Backdoor.IRCBot
GData	Trojan.GenericKD.62227461
Jiangmin	Trojan.Generic.gwkzj
Avira	HEUR/AGEN.1205688
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Generic.ASMalwS.330C
Arcabit	Trojan.Generic.D3B58405
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	GenericR-IDA!554FC77F3FE8
TACHYON	Trojan/W32.Agent.380928.ABL
VBA32	Backdoor.IRC.Unkbot
Malwarebytes	Malware.AI.3419373609
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10ba2eec
Yandex	BackDoor.Unkbot!X+ZYqStr5zM
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Malware.AI.3419373609?

Malware.AI.3419373609 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X