How to remove “Malware.AI.3491300584”?

The Malware.AI.3491300584 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3491300584 virus can do?

Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.3491300584?


File Info:
name: E74E00ABEFBD51FF73A2.mlw
path: /opt/CAPEv2/storage/binaries/b20867baa64dbad081ee5d58b27aca07645f404a9fd015d786e4362caf5c6ab0
crc32: 0EF370CD
md5: e74e00abefbd51ff73a2452ae2048e91
sha1: 8a80d00ebe32db93ac97499c1bc77cbfa744b2d9
sha256: b20867baa64dbad081ee5d58b27aca07645f404a9fd015d786e4362caf5c6ab0
sha512: 8bcc532ea05fd6c0d34ccc58aee051954a3190c9dc131d1db6bf536668f4bb877ccf9e7e8a69010021e80927e4d6db48858d6003ad828c0da8336e125735ce35
ssdeep: 3072:oo3e8bGBDdGeVW6FufgUr1AzBgxsjMjpTBfNEeRM8P:Ve82x5FuxwBgxsspTBCeRr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0C34902B6C24AE2CA28197048DDA7BDC661E9291F165BD3734CFF1E287B5C0B5361DE
sha3_384: 1929bed977270a84593a8dfc3db48daaad5c2452bc9a17b5a140736200ec3a37f7b6ebeb1d83e9fd26f5d7a01acb88c7
ep_bytes: 558bec6aff6860824100687a0a410064
timestamp: 2009-07-17 11:50:51

Version Info:
CompanyName: 
FileDescription: IEMonitor Microsoft 基础类应用程序
FileVersion: 1, 0, 0, 1
InternalName: IEMonitor
LegalCopyright: 版权所有 (C) 2007
LegalTrademarks: 
OriginalFilename: IEMonitor.EXE
ProductName: IEMonitor 应用程序
ProductVersion: 1, 0, 0, 1
Translation: 0x0804 0x04b0

Malware.AI.3491300584 also known as:

Lionic	Trojan.Win32.Agent.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Symmi.63591
FireEye	Generic.mg.e74e00abefbd51ff
CAT-QuickHeal	Backdoor.Figuz.12263
McAfee	generic!bg
Malwarebytes	Malware.AI.3491300584
Zillya	Backdoor.Agent.Win32.59027
Sangfor	Backdoor.Win32.Figuz.do
K7AntiVirus	Trojan ( 000fa1c11 )
Alibaba	Backdoor:Win32/Figuz.37f2ac7b
K7GW	Trojan ( 000fa1c11 )
Cybereason	malicious.befbd5
Arcabit	Trojan.Symmi.DF867
BitDefenderTheta	Gen:NN.ZexaF.36196.hq0@aatOaamb
Cyren	W32/Backdoor.YAEQ-3763
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.OAS
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Ransomware.Cryptor-9867582-0
Kaspersky	Backdoor.Win32.Figuz.do
BitDefender	Gen:Variant.Symmi.63591
NANO-Antivirus	Trojan.Win32.Agent.bcbds
Avast	Win32:Agent-ACQC [Trj]
Tencent	Win32.Backdoor.Figuz.Aplw
Emsisoft	Gen:Variant.Symmi.63591 (B)
Baidu	Win32.Trojan.Agent.fr
F-Secure	Trojan.TR/Agent.awqn.2.A
DrWeb	BackDoor.Spy.46
VIPRE	Gen:Variant.Symmi.63591
McAfee-GW-Edition	generic!bg
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Dropper.Agent
Jiangmin	Backdoor/Agent.bujj
Avira	TR/Agent.awqn.2.A
Antiy-AVL	Trojan/Win32.TSGeneric
Xcitium	TrojWare.Win32.Agent.awqn_2_A2@1me76h
Microsoft	Trojan:Win32/Skeeyah.A!rfn
ViRobot	Backdoor.Win32.Agent.126976.C
ZoneAlarm	Backdoor.Win32.Figuz.do
GData	Gen:Variant.Symmi.63591
AhnLab-V3	Trojan/Win32.RL_Agent.R268566
VBA32	Backdoor.Agent
ALYac	Gen:Variant.Symmi.63591
MAX	malware (ai score=99)
Cylance	unsafe
Panda	Trj/CI.A
Rising	Malware.Undefined!8.C (TFE:5:tT1QAoJR2pQ)
Yandex	Trojan.GenAsa!fXi9pBSBazY
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.2061712
AVG	Win32:Agent-ACQC [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Malware.AI.3491300584?

Malware.AI.3491300584 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X