Malware

Malware.AI.3646825098 malicious file

Malware Removal

The Malware.AI.3646825098 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3646825098 virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Authenticode signature is invalid

How to determine Malware.AI.3646825098?


File Info:

name: 67633DB8D438328FDC1A.mlw
path: /opt/CAPEv2/storage/binaries/7c20d55938cebc425f11c7d858c6aef2b855a1125c7434100b0a119ad887d183
crc32: 0B6CB8D4
md5: 67633db8d438328fdc1afce9f2b83fee
sha1: 4851850c24373efec56187b61c0c588d244f24b3
sha256: 7c20d55938cebc425f11c7d858c6aef2b855a1125c7434100b0a119ad887d183
sha512: 86cde5f501cb3612b3e34a589908d3f50a431d16ca833c77ced9443ba4a75fcd308363964c886b00cdb5303f27c36717419cc199c768912a1aedf736cdd81d4c
ssdeep: 24576:Yxl/H5NbJedjCHROaDj7sOxGTxiBNvlfcwWB4a6Om3mWyQoJfYTI47:s/H5NbkCHRdHsQ3HvFjImWWyQoJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA352336798019B5E1991B7C0CA5FFADB66D9A220B045C9F93807F5F38326FB108B45E
sha3_384: a956e05806d35c439a6b27c0d691f99f02eae1ceb39c72d0c6d3002635642e99f7fe58bebc4b65c597baa988c6442611
ep_bytes: e991eb0d00f35c801480778c94e9bd70
timestamp: 2016-04-08 03:41:31

Version Info:

CompanyName: FLY industry company
FileDescription: JLRRegister
FileVersion: 1.0.0.1
InternalName: JLRRegister.exe
LegalCopyright: Copyright FLY industry company
OriginalFilename: JLRRegister.exe
ProductName: JLR Register
ProductVersion: 1.0.0.1
Translation: 0x0804 0x04b0

Malware.AI.3646825098 also known as:

FireEyeGeneric.mg.67633db8d438328f
CylanceUnsafe
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojan:Win32/VMProtect.423a7893
BitDefenderThetaGen:NN.ZexaF.34084.dD0@aOBSBTfj
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Generic
TencentWin32.Trojan.Generic.Wopv
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosGeneric ML PUA (PUA)
JiangminTrojan.Generic.hcuaq
AviraHEUR/AGEN.1204439
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!67633DB8D438
MalwarebytesMalware.AI.3646825098
TrendMicro-HouseCallTROJ_GEN.R002H07JO21
RisingTrojan.Generic@ML.94 (RDMK:EfZxfMxsO+BfprRHmvuBIQ)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic!tr
PandaTrj/CI.A

How to remove Malware.AI.3646825098?

Malware.AI.3646825098 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment