Malware.AI.3749987426 removal

The Malware.AI.3749987426 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3749987426 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Deletes executed files from disk

How to determine Malware.AI.3749987426?


File Info:
name: D30DFBA8540A2C19A9D5.mlw
path: /opt/CAPEv2/storage/binaries/8e11220c04fa75bbebdf8dd6b5df60956fe5003fb965cf534f90fff5308c02a6
crc32: 68941A08
md5: d30dfba8540a2c19a9d577ea05b800c6
sha1: 26c8e88ffa522208b80820e4b2ac9319803bf4ae
sha256: 8e11220c04fa75bbebdf8dd6b5df60956fe5003fb965cf534f90fff5308c02a6
sha512: 9552f5eb41b7ac3cea661b5078c07b23642adbc4380af24bf794e9e986eab3113a1911ffd7a020c55640b9117a44966ab5bfcda3098749132ecf6ee963eec6ff
ssdeep: 3072:VGFfHgTWmCRkGbKGLeNTBfkNWd4VyuxMytgQ2VDY69Np/+hUfmYMD4n0hFUYV:c5aWbksiNTBsN9yXytgrDvLyimn4nm
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T165449D81F6A082F6D9F5497269969C5662306C38C7D0D9C7B3887B1711F3292433EBEB
sha3_384: 58d83c68fe08ae9b46be0b40227377d4e8da30e36365db427781b642fe02b130b6b6739593edf4e38725a53527be1ae1
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2018-02-01 20:18:05

Version Info:
0: [No Data]

Malware.AI.3749987426 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Skyhigh	BehavesLike.Win32.RealProtect.dm
McAfee	Artemis!D30DFBA8540A
Malwarebytes	Malware.AI.3749987426
Sangfor	Trojan.Win32.Save.a
BitDefenderTheta	Gen:NN.ZexaF.36680.puW@am9czRc
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
Kingsoft	malware.kb.a.833
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:/WuGwrHfh3rnV7yCnHyZrQ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Malware.AI.3749987426?

Malware.AI.3749987426 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X