Malware

Malware.AI.3539020240 removal

Malware Removal

The Malware.AI.3539020240 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3539020240 virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.3539020240?


File Info:

crc32: F9D59C92
md5: 20cb7620cc0077bd0a887d5e1ad97ee8
name: 20CB7620CC0077BD0A887D5E1AD97EE8.mlw
sha1: 1ce2739f27723e3f5a78992d4b7007bb46e295ca
sha256: 248991a7bf307b498f747189464f2234ebb2d62633161f0c721b739cd0937820
sha512: cfdcb4c4bdf43fbe866fce7776e11e7bab44dca59864a5106f913e00159378ea39ec1c7ef6817747c8e30a519d51b7cad5b710b2a6dec173a813de194081d034
ssdeep: 12288:4uOo1u3LKrjJFxUWdz7rXwyp0YIdIEhzO5WoVZ3Jrj1iYfbEAgiWi5v:4CubSzxUY/rgyptyxoVLrj1iYzEAg8J
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright
InternalName: Pafon
FileVersion: 2.3.35.55
CompanyName: Nifot Ltd.
LegalTrademarks:
ProductName: Senubod
ProductVersion: 2.1.32.29
FileDescription:
OriginalFilename: pafonberado.exe
Translation: 0x0409 0x04e4

Malware.AI.3539020240 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 0053f9621 )
LionicRiskware.Win32.DealPly.1!c
Elasticmalicious (high confidence)
MicroWorld-eScanAdware.DealPly.2.Gen
CAT-QuickHealPUA.OccamyPMF.S5659801
CylanceUnsafe
ZillyaAdware.DealPly.Win32.214551
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.5e4d6567
K7GWAdware ( 0053f9621 )
Cybereasonmalicious.0cc007
CyrenW32/DealPly.BS.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.WU potentially unwanted
APEXMalicious
AvastWin32:Adware-gen [Adw]
CynetMalicious (score: 99)
Kasperskynot-a-virus:HEUR:AdWare.Win32.DealPly.gen
BitDefenderAdware.DealPly.2.Gen
NANO-AntivirusRiskware.Win32.DealPly.fkgnyi
TencentMalware.Win32.Gencirc.10cd32f0
Ad-AwareAdware.DealPly.2.Gen
SophosDealPly Updater (PUA)
BitDefenderThetaGen:NN.ZelphiF.34266.LmKfa81KIHdi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.mg.20cb7620cc0077bd
EmsisoftAdware.DealPly.2.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.jwsx
AviraHEUR/AGEN.1104226
Antiy-AVLTrojan/Generic.ASMalwS.26FB8D6
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitAdware.DealPly.2.Gen
GDataAdware.DealPly.2.Gen
AhnLab-V3PUP/Win32.DealPly.C2629702
McAfeeGenericRXAA-AA!20CB7620CC00
MAXmalware (ai score=64)
VBA32Adware.DealPly
MalwarebytesMalware.AI.3539020240
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.DealPly!w6SEzuXGEOs
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/DealPly
AVGWin32:Adware-gen [Adw]

How to remove Malware.AI.3539020240?

Malware.AI.3539020240 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment