How to remove “Malware.AI.3677475849”?

The Malware.AI.3677475849 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3677475849 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3677475849?


File Info:
name: F6C7548670D9D880B9FB.mlw
path: /opt/CAPEv2/storage/binaries/7bfbf49aa71b8235a16792ef721b7e4195df11cb75371f651595b37690d108c8
crc32: 6C12C866
md5: f6c7548670d9d880b9fbea927705b3f9
sha1: 6e52774d0d7ca6a479d8524550baddf3dd1ce9dd
sha256: 7bfbf49aa71b8235a16792ef721b7e4195df11cb75371f651595b37690d108c8
sha512: b5c3441fd41d28c58367657023ed705eaee361c7877c8afeb011d37f111d02b952dd9132d6e97aefabf539e7b11d00dc05dbab22c848eb1cc99aba92ebdf1818
ssdeep: 384:0d1oDR1poP74fqi8cQcyJJIhoA7bU+Ms041m6tmlntSPa3o/yu2lCv4:OKDjpoT4fqipQcoOhR1myiIde
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T165D2B002BCD1CD37D5438A3966BD2B4F99772F7007A55CC36A50EA663EF12E29D32206
sha3_384: 2bd6cf3466117bb2fcb2732e8651790657ec8f8497dd4e80efda49e14e21136c3d879a10d068b4cb7714f6dd96525709
ep_bytes: 558bec6aff68c811400068206a400064
timestamp: 2012-09-17 16:35:06

Version Info:
0: [No Data]

Malware.AI.3677475849 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.f6c7548670d9d880
CAT-QuickHeal	TrojanAPT.Chebri.KL2
Skyhigh	BackDoor-FakeM.a
McAfee	BackDoor-FakeM.a
Malwarebytes	Malware.AI.3677475849
VIPRE	Gen:Variant.Symmi.25604
Sangfor	Suspicious.Win32.Save.ins
BitDefender	Gen:Variant.Symmi.25604
K7GW	Trojan ( 003b43c81 )
K7AntiVirus	Trojan ( 003b43c81 )
Symantec	Backdoor.Fakemrat
ESET-NOD32	a variant of Win32/Inject.NFV
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Reconyc.estx
Alibaba	Backdoor:Win32/Reconyc.917c9dd4
NANO-Antivirus	Trojan.Win32.Swisyn.bddiuj
MicroWorld-eScan	Gen:Variant.Symmi.25604
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.115d4ff9
Emsisoft	Gen:Variant.Symmi.25604 (B)
F-Secure	Heuristic.HEUR/AGEN.1338776
DrWeb	Trojan.DownLoader7.3052
Zillya	Trojan.Reconyc.Win32.16455
TrendMicro	BKDR_FAKEM.O
Trapmine	malicious.high.ml.score
Sophos	Troj/Hurgyu-B
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Inject.agtm
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1338776
MAX	malware (ai score=100)
Antiy-AVL	Trojan[APT]/Win32.Scarletmimic
Kingsoft	Win32.Trojan.Reconyc.estx
Microsoft	Backdoor:Win32/Poison.AU
Xcitium	Malware@#252wun9fh4l3m
Arcabit	Trojan.Symmi.D6404
ViRobot	Trojan.Win32.A.Swisyn.30720.B
ZoneAlarm	Trojan.Win32.Reconyc.estx
GData	Gen:Variant.Symmi.25604
AhnLab-V3	Trojan/Win32.Inject.R46970
VBA32	BScope.Trojan.Reconyc
ALYac	Gen:Variant.Symmi.25604
TACHYON	Trojan/W32.Swisyn.30720.J
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	BKDR_FAKEM.O
Rising	Backdoor.Poison!8.2D7 (TFE:5:VxTnNwcQWVQ)
Yandex	Trojan.GenAsa!EBa6h6E35Q8
Ikarus	Trojan.Win32.Swisyn
Fortinet	W32/Inject.NFV!tr
BitDefenderTheta	Gen:NN.ZexaF.36804.biW@aCfaZqc
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
alibabacloud	Suspicious

How to remove Malware.AI.3677475849?

Malware.AI.3677475849 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X