Malware

Malware.AI.3718715875 removal instruction

Malware Removal

The Malware.AI.3718715875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3718715875 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Touches a file containing cookies, possibly for information gathering
  • Collects information to fingerprint the system
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3718715875?


File Info:

name: 615EF2AB1FB9CBCFBD86.mlw
path: /opt/CAPEv2/storage/binaries/e6f052c8c0ac7620f57ef50ec1ccba07a977a9b0f919e7b96459f4a9c56d181b
crc32: 139BC15B
md5: 615ef2ab1fb9cbcfbd86eb23bc9fd84a
sha1: be77b81fff825406ecf0a906a1443278cb396937
sha256: e6f052c8c0ac7620f57ef50ec1ccba07a977a9b0f919e7b96459f4a9c56d181b
sha512: 1e9e4a8c9de215d53a92e1ee91e7b2a7a6ef9b52a10f443260a24fa1e76bdf1827c2858563210eb4161a6527ac12a0c1d2659f4a5ea70bef53e4f5c901a31a12
ssdeep: 3072:d3xa+dc9ZHSH1NvxcIMVa0hGFEY3BUO71MFsGmK0FL4CSwuSt:d3Y+nJcI6hGFEY3BVMF30FsCnJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19424F104B1E19832E1A756B618B595229D3F3D409BF1D29E7A8C841F1F711E08BF93E3
sha3_384: e1007d84b623211c18c6bc64c2714e1886c7e2f13ad7d026dbde14cc2c224bf5f520211d71783be135eb035e8b387982
ep_bytes: e8ff150000e989feffff8bff558bec83
timestamp: 2015-02-02 19:34:37

Version Info:

FileDescription: 360 Total Security
FileVersion: 5, 2, 0, 1000
InternalName: QHSafeMain
LegalCopyright: Copyright (C) 2014
OriginalFilename: QHSafeMain.exe
ProductName: 360 Total Security
ProductVersion: 5, 2, 0, 1000
Translation: 0x0409 0x04b0

Malware.AI.3718715875 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Johnnie.2747
FireEyeGeneric.mg.615ef2ab1fb9cbcf
McAfeeGeneric-FAVQ!615EF2AB1FB9
Cylanceunsafe
ZillyaTrojan.Kryptik.Win32.3971268
K7AntiVirusTrojan ( 0055dd191 )
K7GWTrojan ( 0055dd191 )
Cybereasonmalicious.b1fb9c
BitDefenderThetaGen:NN.ZexaF.36662.nu0@a46sJLhi
VirITTrojan.Win32.Crypt3.CDXN
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.DBNH
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Zbot.znxr
BitDefenderGen:Variant.Johnnie.2747
NANO-AntivirusTrojan.Win32.Zbot.jturjq
AvastWin32:Agent-AVDO [Trj]
TencentMalware.Win32.Gencirc.11b5bc98
SophosMal/Agent-AQO
F-SecureTrojan.TR/Crypt.ZPACK.Gen4
DrWebTrojan.Siggen6.30807
VIPREGen:Variant.Johnnie.2747
McAfee-GW-EditionBehavesLike.Win32.Spyware.dc
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Johnnie.2747 (B)
IkarusWin32.Outbreak
GDataGen:Variant.Johnnie.2747
JiangminTrojanSpy.Zbot.ftzk
AviraTR/Crypt.ZPACK.Gen4
MAXmalware (ai score=85)
Antiy-AVLTrojan[Spy]/Win32.Zbot
ArcabitTrojan.Johnnie.DABB
ZoneAlarmTrojan-Spy.Win32.Zbot.znxr
MicrosoftVirTool:Win32/Injector.GE
GoogleDetected
AhnLab-V3Trojan/Win32.Tinba.R134450
ALYacGen:Variant.Johnnie.2747
MalwarebytesMalware.AI.3718715875
ZonerTrojan.Win32.32384
RisingSpyware.Zbot!8.16B (TFE:5:yuK08gmLzOS)
YandexTrojanSpy.Zbot!3rsNuVlatxQ
SentinelOneStatic AI – Suspicious PE
AVGWin32:Agent-AVDO [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.3718715875?

Malware.AI.3718715875 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment