What is “Malware.AI.3476635289”?

The Malware.AI.3476635289 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3476635289 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.3476635289?


File Info:
name: 1C1D5F4503660A54B97D.mlw
path: /opt/CAPEv2/storage/binaries/b92e8a2fc45b76e73e946d53d70587c9f89396242b8afb03d73c246c932a9a5d
crc32: 15F82CA9
md5: 1c1d5f4503660a54b97da5b2ef8420b7
sha1: e7946922c1ef88191a3dd42b412c53cdb00254ad
sha256: b92e8a2fc45b76e73e946d53d70587c9f89396242b8afb03d73c246c932a9a5d
sha512: 5b33b921091aa04c969a9cb2e68a2101ee253873f45287a9dba72e673c6bd722a7c5b0de3c1d7f98d9e7ddc8d051a0ec0c578fc171a74ae20df2f20eedc56759
ssdeep: 6144:cEvPJTTETZCQAor6UV5hlAOXTOUthyAmkkp8KZH6R3:XvPJTOrVpTbyE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F8C43AF43BD3C07ED22B13B64459CB8E65A2B8707F758A07B2E93B1E1D349174E205A6
sha3_384: 1f2949ddf2b81187774d46c1289e299086a097560e54921f4751ac48104e9d840fc9d7a2c294407c782dcfa0a6a9b262
ep_bytes: 60be00004f008dbe0010f1ff57eb0b90
timestamp: 2008-07-31 17:12:37

Version Info:
Comments: Created with Setup Factory 8.0
FileDescription: Setup Application
FileVersion: 8.1.1000.0
InternalName: suf80_rt
LegalCopyright: Runtime Engine Copyright © 2008 Indigo Rose Corporation (www.indigorose.com)
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation
OriginalFilename: suf80_rt.exe
ProductName: Setup Factory 8.0 Runtime
ProductVersion: 8.1.1000.0
Translation: 0x0409 0x04b0

Malware.AI.3476635289 also known as:

Bkav	W32.Common.08566359
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.68754593
FireEye	Trojan.GenericKD.68754593
ALYac	Trojan.GenericKD.68754593
Cylance	unsafe
VIPRE	Trojan.GenericKD.68754593
Sangfor	Trojan.Win32.Agent.Vixv
CrowdStrike	win/malicious_confidence_70% (W)
Cyren	W32/Backdoor.J.gen!Eldorado
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.68754593
Avast	Win32:Malware-gen
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.RealProtect.hm
Emsisoft	Trojan.GenericKD.68754593 (B)
GData	Trojan.GenericKD.68754593
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D4191CA1
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	Artemis!1C1D5F450366
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.3476635289
TrendMicro-HouseCall	TROJ_GEN.R002H09HK23
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.187389273.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.3476635289?

Malware.AI.3476635289 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X