Malware

Malware.AI.3731653980 removal

Malware Removal

The Malware.AI.3731653980 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3731653980 virus can do?

  • A process created a hidden window
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Network activity contains more than one unique useragent.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

www.wholists.org

How to determine Malware.AI.3731653980?


File Info:

crc32: DEAB0A5C
md5: a47657cdb7925b78260320e386a087e3
name: A47657CDB7925B78260320E386A087E3.mlw
sha1: 7713fde7fb4cce88fca5a87bb16e571a4ca5b2da
sha256: 3daa675c7937b4486ed8b2493918dde8ebbc92dfd4bfde473da31cd930c31f3f
sha512: 7fd97e69231f59eb8b7bb4803226f355c5718fb7fd5f2b33abddc7abc62259414264209670be32025f9f6342eb16807f35a73747672b563eb672df627d123db5
ssdeep: 6144:XmUy7+CxDIF1ys27tKTfmcaZ4tlidBBrK4DyM2QB8WXasRCoM/AxNXBIZlHnMHJ:qaGX1kygPSuKKgH9uhlFIp5X7M
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: cisvc.exe
FileVersion: 6.1.7600.16385
CompanyName: Microsoft Corporation
PrivateBuild: cisvc.exe
LegalTrademarks: xa9 Microsoft Corporation. All rights reserved.
Comments:
ProductName: Microsoftxae Windowsxae Operating System
SpecialBuild: 6.1.7600.16385
ProductVersion: 6.1.7600.16385
FileDescription: Content Index service
OriginalFilename: cisvc.exe
Translation: 0x0409 0x04b0

Malware.AI.3731653980 also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader6.16266
MicroWorld-eScanGen:Heur.Naffy.1
FireEyeGeneric.mg.a47657cdb7925b78
CAT-QuickHealTrojan.Mutopy.A
ALYacGen:Heur.Naffy.1
MalwarebytesMalware.AI.3731653980
VIPRETrojan.Win32.Mutopy.a (v)
SangforMalware
K7AntiVirusTrojan ( 0053c3c71 )
BitDefenderGen:Heur.Naffy.1
K7GWTrojan ( 0053c3c71 )
Cybereasonmalicious.db7925
BitDefenderThetaGen:NN.ZexaF.34804.Ju0@aae7hhji
CyrenW32/Troj_Obfusc.AI.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Downloader-OPN [Trj]
ClamAVWin.Trojan.Multi-6413508-0
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Mutopy.205af9b7
NANO-AntivirusTrojan.Win32.Kazy.esusie
ViRobotTrojan.Win32.Z.Mutopy.577536.AE
RisingTrojan.Mutopy!1.9D89 (CLOUD)
Ad-AwareGen:Heur.Naffy.1
SophosML/PE-A + Troj/Dapato-A
ComodoTrojWare.Win32.Kazy.TFT@4p46ar
F-SecureTrojan.TR/Kazy.34213.jh
ZillyaTrojan.Rodecap.Win32.2925
TrendMicroTROJ_MUTOPY.SMYN
McAfee-GW-EditionBehavesLike.Win32.Mutopy.hh
EmsisoftGen:Heur.Naffy.1 (B)
IkarusTrojan.Win32.Jorik
JiangminTrojan/Jorik.ecdz
AviraTR/Kazy.34213.jh
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftTrojan:Win32/Mutopy.A
ArcabitTrojan.Naffy.1
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.Naffy.1
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.HDC.C53646
Acronissuspicious
McAfeeMutopy-BAB!A47657CDB792
VBA32TScope.Malware-Cryptor.SB
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Rodecap.AP
TrendMicro-HouseCallTROJ_MUTOPY.SMYN
TencentWin32.Trojan.Generic.Llqs
YandexTrojan.GenAsa!7IrftBAkZgk
SentinelOneStatic AI – Suspicious PE
FortinetW32/Dapato.AA!tr
AVGWin32:Downloader-OPN [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Generic/Trojan.249

How to remove Malware.AI.3731653980?

Malware.AI.3731653980 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment