Malware.AI.3567976849 removal guide

The Malware.AI.3567976849 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3567976849 virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3567976849?


File Info:
name: CAE159672E017C84595C.mlw
path: /opt/CAPEv2/storage/binaries/e781cb2301ccd364c0fd3445f2d8943849a4c47c6a9db2177f6d00dfb06289d1
crc32: E31F3528
md5: cae159672e017c84595c85b26baef05a
sha1: a4fffd05cf12fbaa0cb68dc41dc28c6e31402379
sha256: e781cb2301ccd364c0fd3445f2d8943849a4c47c6a9db2177f6d00dfb06289d1
sha512: f68923939f0aec7a1f1ff2a2d221cdbe64cd9717aeace85dbfdbe9a46c85052f29dabe1b95579229398acc718dfcf5c9ae66b0437c4def7a9d8bf8d8ba951c8a
ssdeep: 6144:CvBRzhN67VjK/l3R42OoswxXEquo2bIqdAq6SFAJ0fTq7V8o6a2zAKFfIt:Cv3zhgtIl3O2Oo7xXE9bIqdcSF+0fTqz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EB84382439FA501AB173EFAA4BE4B5DADA6FB7333B07645E105103864723A81DEC153E
sha3_384: 6b5ce6e319ef6424642d5d4178276eb04203d73834382705307409bbde5efadf565dd385242361a6360c3f4ccc7d5bf9
ep_bytes: ff250020400000000000000000000000
timestamp: 2039-11-10 15:07:49

Version Info:
Translation: 0x0000 0x04b0
CompanyName: WinFormApp
FileDescription: WinFormApp
FileVersion: 1.0.0.0
InternalName: WinFormApp.exe
LegalCopyright:  
OriginalFilename: WinFormApp.exe
ProductName: WinFormApp
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

Malware.AI.3567976849 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Heuristic.File.Generic.00×1!p
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.61871968
FireEye	Generic.mg.cae159672e017c84
McAfee	RDN/Real Protect-LS
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Kryptik.3813428e
K7GW	Trojan ( 00596f0f1 )
K7AntiVirus	Trojan ( 00596f0f1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.AFKG
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.61871968
Avast	Win32:CrypterX-gen [Trj]
Tencent	Win32.Trojan.Dropper.Tsmw
Ad-Aware	Trojan.GenericKD.61871968
Sophos	Mal/Kryptik-BA
VIPRE	Trojan.GenericKD.61871968
TrendMicro	TROJ_GEN.R002C0PIA22
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.61871968 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.61871968
Avira	TR/Dropper.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.3E3F
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
ALYac	Trojan.GenericKD.61871968
Malwarebytes	Malware.AI.3567976849
TrendMicro-HouseCall	TROJ_GEN.R002C0PIA22
Rising	Malware.Obfus/MSIL@AI.90 (RDM.MSIL:hGtrgLR8yuGaHjcbWGAtAQ)
Ikarus	Win32.Outbreak
Fortinet	MSIL/Injector.SHW!tr
BitDefenderTheta	Gen:NN.ZemsilF.34646.xm0@aywv9Gh
AVG	Win32:CrypterX-gen [Trj]
Cybereason	malicious.72e017

How to remove Malware.AI.3567976849?

Malware.AI.3567976849 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X