What is “Malware.AI.3422079160”?

The Malware.AI.3422079160 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3422079160 virus can do?

Unconventionial language used in binary resources: Hebrew
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.3422079160?


File Info:
name: A21CD33FAF600627468D.mlw
path: /opt/CAPEv2/storage/binaries/cf29904daac3d8d3a3c69147a5f568c79fc70dd346555ffe1c41c8dbec8363e3
crc32: 89BC622E
md5: a21cd33faf600627468df147df5b85c9
sha1: 310358eede2d0934350b4d41e1e9d2728b2efe90
sha256: cf29904daac3d8d3a3c69147a5f568c79fc70dd346555ffe1c41c8dbec8363e3
sha512: fef19196aaef942de927b884453c72c197e31ea42cfeba0076145a624ce9f498beabb862ff74b0e5593eec773c647572b1cb0b3fc94c3afdabb0a8fae11f2e64
ssdeep: 768:CZ1uSne+nuT1Hn9muQobdz3t/+SqPG6x8fX:CvuARnu5Hn9mNobXjqJx8fX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F9434A52BBD4CDE6D0B20A71DCA287665724FC208A78C34BF44CE36F2F3A5825E52759
sha3_384: 450cddc0118fd1a8d3c6db1c39fa7e28c85329f0218ef9dc3f6659682ea216a71704156def4b9d12fe7585e65f26ac69
ep_bytes: 60be004041008dbe00d0feff57eb0b90
timestamp: 2012-12-30 08:49:49

Version Info:
CompanyName: NirSoft
FileDescription: BlueScreenView
FileVersion: 1.55
InternalName: BlueScreenView
LegalCopyright: Copyright © 2009 - 2015 Nir Sofer
OriginalFilename: BlueScreenView.exe
ProductName: BlueScreenView
ProductVersion: 1.55
Translation: 0x0409 0x04b0

Malware.AI.3422079160 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKD.66763104
ALYac	Trojan.GenericKD.66763104
Malwarebytes	Malware.AI.3422079160
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.ede2d0
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.66763104
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.66763104 (B)
VIPRE	Trojan.GenericKD.66763104
McAfee-GW-Edition	BehavesLike.Win32.Generic.qt
FireEye	Generic.mg.a21cd33faf600627
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.66763104
Antiy-AVL	Trojan/Win32.ULPM
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D3FAB960
Google	Detected
McAfee	Artemis!A21CD33FAF60
MAX	malware (ai score=85)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09E123
Ikarus	Backdoor.Agent
MaxSecure	Trojan.Malware.207188962.susgen
Fortinet	W32/ULPM.2C75!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.3422079160?

Malware.AI.3422079160 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X