Malware

Malware.AI.3472906795 malicious file

Malware Removal

The Malware.AI.3472906795 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3472906795 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.3472906795?


File Info:

name: BA529549DF938394F37E.mlw
path: /opt/CAPEv2/storage/binaries/9c77b484c19f90515f4fb84f5357e52d4b3d948eb35a22839e89ca43d472c4d0
crc32: 71E1EE09
md5: ba529549df938394f37eb674b0d40c50
sha1: a0b85fca9005ce906fa55aa2df892ae8770d3df7
sha256: 9c77b484c19f90515f4fb84f5357e52d4b3d948eb35a22839e89ca43d472c4d0
sha512: 309c39ad7a815f84083d1637c8a7dc7beb744a3ffd1d4e89d93cfebef5dd2686b30f3c342d6f429ab04c3e964e7990fcfc64618c494507969074fbcca05ad5f8
ssdeep: 24576:XKKKKKKKKKKKKKKKKKEKKKKKKKKKKKKKKKKKKKKKKKKKKi:Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4058C036360808BF7C28B34C17A97B961F63DA8802B45A394983F677D367C69FDD859
sha3_384: 995695ada31d05091a47d5510f1fa710adec59bf1138f2386f5d55c4f55ac4a15b609da7a4dfda973de13f7990a47346
ep_bytes: 2d731098903f740008033018a97ab91e
timestamp: 2008-04-28 00:48:37

Version Info:

0: [No Data]

Malware.AI.3472906795 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.39915821
ClamAVLegacy.Trojan.Agent-1388589
FireEyeGeneric.mg.ba529549df938394
CAT-QuickHealWorm.Agent.S27762275
McAfeeGenericRXAA-FA!BA529549DF93
VIPRETrojan.GenericKD.39915821
SangforSuspicious.Win32.Save.a
AlibabaWorm:Win32/Generic.73059a6f
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/VBTrojan.17E!Maximus
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyWorm.Win32.Agent.gn
BitDefenderTrojan.GenericKD.39915821
NANO-AntivirusTrojan.Win32.Drop.edavyu
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.10d0a339
Ad-AwareTrojan.GenericKD.39915821
EmsisoftTrojan.GenericKD.39915821 (B)
ComodoPacked.Win32.MUPX.Gen@24tbus
DrWebTrojan.MulDrop3.77
ZillyaWorm.Agent.Win32.157347
TrendMicroSuspicious
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11GVV14
JiangminWorm.Agent.alg
AviraTR/Dropper.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/Generic.ASBOL.C686
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Worm/Win.Agent.R508357
BitDefenderThetaGen:NN.ZexaF.34606.YmZ@aeW7@Uk
ALYacTrojan.GenericKD.39915821
VBA32Worm.Agent
MalwarebytesMalware.AI.3472906795
RisingWorm.Agent!8.25 (TFE:2:G3LU8Bxu5AS)
IkarusWorm.Agent
FortinetW32/Agent.060A!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.9df938

How to remove Malware.AI.3472906795?

Malware.AI.3472906795 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment