Malware.AI.3576986028 removal tips

The Malware.AI.3576986028 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3576986028 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Authenticode signature is invalid

How to determine Malware.AI.3576986028?


File Info:
name: DFB1D859F7E4AD95F2DA.mlw
path: /opt/CAPEv2/storage/binaries/9f10faa5e1ef12bfeb6a2b25bab909f2a22d64fb2c675e726a94de9fcc04bdbb
crc32: 26354890
md5: dfb1d859f7e4ad95f2da4f84808db678
sha1: 362fae36e362f67ce9a60667bc5546e7b4704166
sha256: 9f10faa5e1ef12bfeb6a2b25bab909f2a22d64fb2c675e726a94de9fcc04bdbb
sha512: 83b51f8b9555bb3e84bce384621f237fc744d9018f8ff719dca5b34565864891bba814a2314903b4ea6052df7bb2d9a3fb2f2cafd31611bef88cb977d23f4f1a
ssdeep: 24576:e2bPhaYcaiqnVdl8epRcwQ2LRupFJUOfwh8u9hx0D70NE7tFTYEIrcv14Cw:vPhx9dlxpRcwXyEd9hx0/0NE7tFIrcg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16BC57C01FA938E73D873023099E79B560A35EA608B51DBC7539434A85DB37E03E6B3D9
sha3_384: 21b1cf322b4606c1e1cb14e0ae8b8e9d6c72dd30ea9cb2e0932698c5d1a4f62e6cfed233009668d82896c8644c567299
ep_bytes: e842e60000e989feffff8bff558bec5d
timestamp: 2022-06-09 23:42:01

Version Info:
CompanyName: 单位名称
FileDescription: OmegaHR
FileVersion: 0.0.0.2
InternalName: OmegaHR
LegalCopyright: Copyright (C) 作者 2022
OriginalFilename: OmegaHR.exe
ProductName: OmegaHR
ProductVersion: 0.0.0.2
Translation: 0x0009 0x04b0

Malware.AI.3576986028 also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.dfb1d859f7e4ad95
Malwarebytes	Malware.AI.3576986028
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.6e362f
ESET-NOD32	a variant of Win32/Packed.AAuto.B suspicious
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Aauto-9839278-0
Zillya	Trojan.AAuto.Win32.146
McAfee-GW-Edition	GenericRXTZ-DO!DFB1D859F7E4
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	PUA.AAuto
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
McAfee	GenericRXTZ-DO!DFB1D859F7E4
Cylance	Unsafe
Rising	Trojan.Generic@AI.92 (RDMK:cmRtazqbwUtaIQFrW/2GqpbgTp5F)
Yandex	Trojan.GenAsa!BlW5PwM8JpE
SentinelOne	Static AI – Malicious PE
BitDefenderTheta	Gen:NN.ZexaF.34646.ys0@aqWAi6fG
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.3576986028?

Malware.AI.3576986028 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X