Malware

About “Malware.AI.3690180379” infection

Malware Removal

The Malware.AI.3690180379 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3690180379 virus can do?

  • Presents an Authenticode digital signature
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Malware.AI.3690180379?


File Info:

name: 89082160B7170C621B5C.mlw
path: /opt/CAPEv2/storage/binaries/4bf3091c1e92a62078b47c7ccc5f22022ed3cf390ea878727062572799988882
crc32: 1ED764CE
md5: 89082160b7170c621b5c9fe71b2db34b
sha1: 9bd3afbe9efdf9a3000db6678ec5c4c7060ea843
sha256: 4bf3091c1e92a62078b47c7ccc5f22022ed3cf390ea878727062572799988882
sha512: 2ce204e7ce2afbc40af2d71f4bb3ba7a640b02179248433008cfc8bbd52df3169a517b828a69aedd1cefc8368e37b7b7fe3c757bb4b24848b0cde401a7d4f551
ssdeep: 6144:LD4SEH1kHhTxmlp+NgR8mwnSAOY5o2TB63o9Em2+Jzf6WI5uOvOYOhODOXOYOzOY:L78A4ldRNwnSa9TB63kwWBwKi8C+lPY
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1C205F6116AE94431E1B20A701EB4E55D5A39BD61D823CE1F22907EDEFFF5B809E24732
sha3_384: 6c9ab232f5e521c96d9e3a7f28deeeb3cfd830a7d8c517c17395152fa8824d072c574955c1430bcf5fad4b5c8179e8fb
ep_bytes: 40534883ec20488bd9e88a050000488b
timestamp: 2100-03-02 06:33:42

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Client Server Runtime Process
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
InternalName: CSRSS.Exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: CSRSS.Exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.17134.1
Translation: 0x0409 0x04b0

Malware.AI.3690180379 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
McAfeeArtemis!89082160B717
CylanceUnsafe
SangforTrojan.Win32.Save.a
CyrenW64/Ipamor.CZ.gen!Eldorado
SymantecTrojan.Gen.MBT
Paloaltogeneric.ml
ClamAVWin.Malware.Ipamor-9884573-0
AvastFileRepMalware
SophosMal/Generic-R
McAfee-GW-EditionBehavesLike.Win64.Rootkit.bm
SentinelOneStatic AI – Suspicious PE
JiangminWorm.AutoRun.awpf
AviraHEUR/AGEN.1141290
Antiy-AVLTrojan/Generic.ASBOL.C6BF
GridinsoftRansom.Win64.Sabsik.sa
CynetMalicious (score: 100)
VBA32Trojan.VBKrypt
MalwarebytesMalware.AI.3690180379
IkarusTrojan.Dropper
FortinetW64/Bulz.6330!tr
AVGFileRepMalware
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Malware.AI.3690180379?

Malware.AI.3690180379 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment