About “Malware.AI.3576658787” infection

The Malware.AI.3576658787 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3576658787 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.3576658787?


File Info:
name: 25B3E786B0AADDE65E61.mlw
path: /opt/CAPEv2/storage/binaries/edd067cdede81464bb22034f8028b7011aa195ff7e04b357ef73d679032846a3
crc32: FBEF6D5A
md5: 25b3e786b0aadde65e619d32b5048ffa
sha1: 67e3ceaba0758d7b32ba46da0a99ef65136a6cab
sha256: edd067cdede81464bb22034f8028b7011aa195ff7e04b357ef73d679032846a3
sha512: 44ece2c0ee457f9c6fdc4b77c2e04e58e99f50505ad25bd8f6627281488647eea0418c882e6faf1e15c5a3c577e94c0feeb79aa75e5eea94734cd4b5ceb5da41
ssdeep: 1536:Af0IlXQPGTjuCrIs+WpILglkOa0UgXcZ+:w0wQ65+AKOa0Ug4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T161939D3379A2867AD0CE513308A1CB3EAB76951003224ADFCB9CDA663F7E1B77516135
sha3_384: 775f9ffe84e77827e9c01246c54260680e0b6d82d2bcb76ca5861204efa72802886cc108a350a106989522ac06680690
ep_bytes: 4638d0741584c0740b8a064638d0740a
timestamp: 2013-04-24 08:52:36

Version Info:
0: [No Data]

Malware.AI.3576658787 also known as:

Bkav	W32.AIDetectMalware
Skyhigh	BehavesLike.Win32.Generic.nm
Malwarebytes	Malware.AI.3576658787
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_90% (D)
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
Sophos	Generic ML PUA (PUA)
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.25b3e786b0aadde6
SentinelOne	Static AI – Malicious PE
Kingsoft	malware.kb.b.910
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Application.PSE.1ETEWJE
Google	Detected
Acronis	suspicious
Cylance	unsafe
Ikarus	Trojan.Win32.Scar
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.ba0758
DeepInstinct	MALICIOUS

How to remove Malware.AI.3576658787?

Malware.AI.3576658787 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X