Malware

Malware.AI.3493889267 removal

Malware Removal

The Malware.AI.3493889267 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3493889267 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Malware.AI.3493889267?


File Info:

name: 736A755C83549CD9BBE2.mlw
path: /opt/CAPEv2/storage/binaries/d669fd26fe720f9fc954558bc65a2c0a7ed405f47d0772c1928d5b7febbb449c
crc32: 8CA86EAF
md5: 736a755c83549cd9bbe23511d5d4738a
sha1: 1a2d69a68bfdb30e70144e09b0ff12ea99c219cf
sha256: d669fd26fe720f9fc954558bc65a2c0a7ed405f47d0772c1928d5b7febbb449c
sha512: abf52f9ee143bf526f9672a2825ee3d9ab1a84c103de814c557c38976cea0e0d854a109843bde0f664dbbb800e6fda763189f8e514dac6e44671bdf45a302717
ssdeep: 12288:iWApYanZEu8OTZjXmoTgeF8i31xWlsFnwYh2jvn2mV2sLRA5Fvq6j4kg9V3WTM:ieIZjBXmoTgeF1DMbn2m4sI8kg9V3Wo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18635CF83F2C7AA54C34877F3C985317123B29E167A0BD5592C34F2741A36E9BEDA844E
sha3_384: 9a0ff647f1acec2e847659b78b064595ab48c13a283503c4e580b3dc38d84d43b99e186176e4cdea93de0153d1ac18e8
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-02-07 08:51:43

Version Info:

Translation: 0x0000 0x04b0
FileDescription: BTC-to-BITCOIN 2018
FileVersion: 1.0.0.0
InternalName: BTC-to-BITCOIN.exe
LegalCopyright:
OriginalFilename: BTC-to-BITCOIN.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3493889267 also known as:

LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.249180
FireEyeGeneric.mg.736a755c83549cd9
McAfeeArtemis!736A755C8354
CylanceUnsafe
SangforTrojan.Win32.Wacatac.A
K7AntiVirusTrojan ( 0051725e1 )
K7GWTrojan ( 0051725e1 )
Cybereasonmalicious.c83549
BitDefenderThetaGen:NN.ZemsilF.34294.gn0@aOQV1D
ESET-NOD32a variant of MSIL/Hoax.FakeHack.ASJ
TrendMicro-HouseCallTROJ_GEN.R002H09IN21
Paloaltogeneric.ml
BitDefenderGen:Variant.Razy.249180
NANO-AntivirusTrojan.Win32.Razy.exwrvy
AvastWin32:Malware-gen
TencentMsil.Risk.Hoax.Agbi
Ad-AwareGen:Variant.Razy.249180
EmsisoftGen:Variant.Razy.249180 (B)
ComodoMalware@#9jw0jjl40iup
VIPREMSIL.Hoax.FakeHack (not malicious)
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Malicious PE
SophosGeneric PUA BK (PUA)
GDataGen:Variant.Razy.249180
ArcabitTrojan.Razy.D3CD5C
ALYacGen:Variant.Razy.249180
MalwarebytesMalware.AI.3493889267
APEXMalicious
YandexHoax.FakeHack!jQhFSoA5emc
MAXmalware (ai score=80)
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Hack
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.3493889267?

Malware.AI.3493889267 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment