Malware

Malware.AI.3712527239 removal instruction

Malware Removal

The Malware.AI.3712527239 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3712527239 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • CAPE detected the embedded win api malware family
  • Uses suspicious command line tools or Windows utilities
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3712527239?


File Info:

name: 179DBE90A53A82C51F18.mlw
path: /opt/CAPEv2/storage/binaries/97346e7243c7d16f23621d86c57614e4fbe1a855f6177c7a212fdd93869aee87
crc32: 46AC7DE9
md5: 179dbe90a53a82c51f1822510196926f
sha1: c5d2ab013d0c07e6c0bf492948dd414c5e3760ab
sha256: 97346e7243c7d16f23621d86c57614e4fbe1a855f6177c7a212fdd93869aee87
sha512: 17c425cde558a15389a8180abc4085955b2c1e2085c5825b2b2177a0a3cf610fb6582c151f1718cfb6896633845d83e31b77d1b0409972a1db63d341490814e8
ssdeep: 98304:llwIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIG:l+IIIIIIIIIIIIIIIIIIIIIIIIIIIIIN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16D4612FA26E0B1E942501B65FCA5E04A97EB2ED750B31A787356BD2D3C23CC55A30B70
sha3_384: 4ec72922c3e3401a2cc2369cbafc3c14f013fc87d58addad41f0bc75d934344f9bebe95b1d4ab21551fedbe5d93626ee
ep_bytes: 60be008041008dbe0090feff57eb0b90
timestamp: 2008-03-07 16:32:58

Version Info:

0: [No Data]

Malware.AI.3712527239 also known as:

BkavW32.AIDetectMalware
LionicVirus.Win32.Lamer.ljKD
AVGWin32:Evo-gen [Trj]
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Lazy.513362
FireEyeGeneric.mg.179dbe90a53a82c5
SkyhighBehavesLike.Win32.Generic.tc
McAfeeArtemis!179DBE90A53A
Cylanceunsafe
ZillyaTrojan.Agent.Win32.3911075
SangforTrojan.Win32.Packed.Vnir
AlibabaTrojanPSW:Win32/Axespec.5a1bed83
K7GWTrojan ( 001697541 )
K7AntiVirusTrojan ( 001697541 )
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Agent.RDE
CynetMalicious (score: 100)
APEXMalicious
AvastWin32:Evo-gen [Trj]
ClamAVWin.Packed.Babar-10027386-0
KasperskyPacked.Win32.Krap.an
BitDefenderGen:Variant.Lazy.513362
NANO-AntivirusTrojan.Win32.Krap.bndmi
TencentMalware.Win32.Gencirc.10bfd087
EmsisoftGen:Variant.Lazy.513362 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
DrWebTrojan.Packed.19696
VIPREGen:Variant.Lazy.513362
TrendMicroTROJ_GEN.R03BC0DDT24
Trapminemalicious.moderate.ml.score
SophosMal/FakeAV-BW
JiangminPacked.Krap.ceuf
VaristW32/Agent.IRC.gen!Eldorado
AviraTR/Crypt.XPACK.Gen2
MAXmalware (ai score=83)
Antiy-AVLTrojan[Packed]/Win32.Krap
MicrosoftPWS:Win32/Axespec.A
XcitiumPacked.Win32..Krap.~N@1ygdj5
ArcabitTrojan.Lazy.D7D552
ZoneAlarmPacked.Win32.Krap.an
GDataGen:Variant.Lazy.513362
GoogleDetected
AhnLab-V3Packed/Win.Generic.R644660
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36804.@pJfaKY4wad
ALYacGen:Variant.Lazy.513362
VBA32Trojan.SB.0626
MalwarebytesMalware.AI.3712527239
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DDT24
RisingStealer.Axespec!8.1328C (CLOUD)
YandexTrojan.Agent!kLaazL61NCo
IkarusTrojan.Win32.Agent
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Krap.AN!tr
DeepInstinctMALICIOUS
alibabacloudVirtool:Win/Axespec.A

How to remove Malware.AI.3712527239?

Malware.AI.3712527239 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment