Malware

Malware.AI.3723426788 removal

Malware Removal

The Malware.AI.3723426788 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3723426788 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • At least one process apparently crashed during execution
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.3723426788?


File Info:

name: DD291E673F14DFCA2548.mlw
path: /opt/CAPEv2/storage/binaries/8747a1f9943fd606cd4454e8801af7adf579c98c55d9b343ea8d60fef1f1d94b
crc32: 530306EB
md5: dd291e673f14dfca2548c393eeb70c21
sha1: 016c840c0c8191473cbe339b01a5dda69bad8a54
sha256: 8747a1f9943fd606cd4454e8801af7adf579c98c55d9b343ea8d60fef1f1d94b
sha512: bafdb6c19f172195e3ab876a340b679706fe2cdab6328732e11e8b60c3eb40aebe52a484d94fdde40dd8f595f8bdd9ae1cc7096944ae6343f8ac59c5b34a1ff3
ssdeep: 6144:4l6464Vj3mZ9yDL7Xqjj9bGuRmGvXoSqe:4lr6IWTWzq/3NfoSqe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16034124295F4485AF11F073082E7A85608B1AF189FDD4929FBC97266BCE37ACF634641
sha3_384: e583e40e185b58128fa3b6a454a79386db7256bdae2ae0818fd6cb4b91941107420986fe0c4c8ab6fc7ff88e2c1ddd02
ep_bytes: 60be00604c008dbe00b0f3ff5789e58d
timestamp: 2012-11-19 10:40:04

Version Info:

Translation: 0x0409 0x04b0
CompanyName: The UPX Team http://upx.sf.net
FileDescription: gisser dйminйes alco
ProductName: trahissent complaisamment
FileVersion: 9.04.0001
ProductVersion: 9.04.0001
InternalName: truquage hypote'n
OriginalFilename: truquage hypote'n.exe

Malware.AI.3723426788 also known as:

LionicTrojan.Win32.Jorik.lmWP
MicroWorld-eScanGen:Variant.Jaik.23967
FireEyeGen:Variant.Jaik.23967
McAfeeGeneric BackDoor.ada
CylanceUnsafe
ZillyaTrojan.Zbot.Win32.88654
SangforHacktool.Win32.VBInject.gen!JD
K7AntiVirusTrojan ( 004022601 )
AlibabaVirTool:Win32/VBInject.79027d10
K7GWTrojan ( 004022601 )
Cybereasonmalicious.73f14d
CyrenW32/A-beae82b4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.ZFZ
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Jaik.23967
NANO-AntivirusTrojan.Win32.WBNA.edkafb
AvastWin32:Trojan-gen
TencentWin32.Trojan-Spy.Zbot.dftp
SophosMal/Generic-S
ComodoMalware@#11ic4m5v88vfz
DrWebTrojan.PWS.Panda.2982
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.FCBEZL9
McAfee-GW-EditionGeneric BackDoor.ada
EmsisoftGen:Variant.Jaik.23967 (B)
SentinelOneStatic AI – Malicious PE
eGambitGeneric.PSW
AviraHEUR/AGEN.1239261
Antiy-AVLWorm/Win32.WBNA
KingsoftWin32.Heur.KVMH019.a.(kcloud)
GridinsoftRansom.Win32.Zbot.sa
MicrosoftPWS:Win32/Zbot
ViRobotTrojan.Win32.A.Zbot.240792
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.VB.I@gen
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.VBKrypt.R40134
BitDefenderThetaGen:NN.ZevbaF.34182.omLfaiw2A6fi
MAXmalware (ai score=99)
VBA32TrojanSpy.Zbot
MalwarebytesMalware.AI.3723426788
TrendMicro-HouseCallTROJ_GEN.FCBEZL9
RisingTrojan.Injector!1.B1C9 (CLASSIC)
YandexTrojan.Injector!pBiW+NgMIaE
IkarusTrojan-PWS.Win32.Zbot
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.YWH!tr
AVGWin32:Trojan-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.3723426788?

Malware.AI.3723426788 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment