Malware

Malware.AI.3638718391 removal instruction

Malware Removal

The Malware.AI.3638718391 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3638718391 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary file triggered YARA rule

How to determine Malware.AI.3638718391?


File Info:

name: 51506F5E94DDBD3E1088.mlw
path: /opt/CAPEv2/storage/binaries/61963bc908370d2a13a4f15dda5e92f494b8faf742fc30884b711829ac5a8eea
crc32: 6C52D886
md5: 51506f5e94ddbd3e1088e8602dd2cc32
sha1: 6f6831ae859aa64410e14dd7c230eff8a5672685
sha256: 61963bc908370d2a13a4f15dda5e92f494b8faf742fc30884b711829ac5a8eea
sha512: bfc29246972184a32f7c8fed2a3db70532dfc4fb2354042ad5d3fdd638c55ad98eeecad4a510480165867a8f085274bdb59fe2a9df0b94f31ba4230f0f7ae5b1
ssdeep: 3072:7bwMvHxSxeqV4NuMcycIuuL81/SzIIomMMmVwMvHxSxeqV4NF:441NuMbxuuLToGF41N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T152645B4032C58559F665493C0AAED77002E1EF652711FB8F3BD87EEF3ABA683024265D
sha3_384: 2cef8e273c1ad57b2d4d7491a95f761ea8c79c79e50f7329fb598ca8399844ee1e66768e52cec5c59319f0ea4e92c709
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-04-22 11:31:24

Version Info:

Translation: 0x0000 0x04b0
Comments: SaveRestore by AlCaesar
FileDescription: SaveRestore
FileVersion: 1.1.0.0
InternalName: SaveRestore.exe
LegalCopyright: Copyright © 2020
OriginalFilename: SaveRestore.exe
ProductName: SaveRestore by AlCaesar
ProductVersion: 1.1.0.0
Assembly Version: 1.1.0.0

Malware.AI.3638718391 also known as:

BkavW32.AIDetectMalware.CS
SkyhighGenericRXKM-BJ!51506F5E94DD
McAfeeGenericRXKM-BJ!51506F5E94DD
Cylanceunsafe
SangforTrojan.Win32.Agent.Vvjp
SymantecTrojan.Gen.MBT
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002H0CD924
AvastWin32:Malware-gen
SophosGeneric Reputation PUA (PUA)
MAXmalware (ai score=100)
GoogleDetected
VaristW32/ABRisk.YRTN-0399
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Malware/Win32.RL_Generic.C4006144
MalwarebytesMalware.AI.3638718391
PandaTrj/GdSda.A
RisingTrojan.Occamy!8.F1CD (C64:YzY0OgRTt7VtOsa6)
IkarusSuspectFile
MaxSecureTrojan.Malware.12074195.susgen
FortinetPossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Malware.AI.3638718391?

Malware.AI.3638718391 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment