Malware.AI.3777324860 removal

The Malware.AI.3777324860 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3777324860 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3777324860?


File Info:
name: A1FD612301B8F45001E7.mlw
path: /opt/CAPEv2/storage/binaries/6ae0b01b0b9c8018e969d6486c5ac41f4968ac3ebe19ea7be13528f1c00f5a69
crc32: 13C8CBF9
md5: a1fd612301b8f45001e7e4387343e36c
sha1: 50db05c75c64be93c1c7cd22095f6a642120b612
sha256: 6ae0b01b0b9c8018e969d6486c5ac41f4968ac3ebe19ea7be13528f1c00f5a69
sha512: fa8cc20004c52e10b16b13a8eb7e195d486ad83d1bfcf882a198691deeefe529673be265751196455d2d946f52db7b7b252b64566b00519637302e2376845789
ssdeep: 6144:bxi9nH759qc8g/1g6nBLKpXnhyt4JICzZ:Q9nbx/1g6nB+JhymJX9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6C48C1277E18475E37626324DF95739B5BABC608A32D7CB5380EB1C9C329C1893A376
sha3_384: ec373f8fadc8024df95c3e2c856a9d28b83d6085775c26dd8db68411f323c29481a3900aa91ec00ddd61706e5edc65f1
ep_bytes: 558bec6aff68681e4300683887410064
timestamp: 2055-05-25 18:10:40

Version Info:
Comments: For updates visit http://cleanup.stevengould.org/
CompanyName: Steven R. Gould
FileDescription: Removes temporary files. Frees disk space and helps protect privacy!  :-)
FileVersion: 3.1.2
InternalName: CleanUp!
LegalCopyright: Copyright 1998-2003 Steven R. Gould
LegalTrademarks: 
OriginalFilename: cleanup.exe
PrivateBuild: 
ProductName: Windows CleanUp!
ProductVersion: 3.1.2
SpecialBuild: 
Translation: 0x0409 0x04b0

Malware.AI.3777324860 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
MicroWorld-eScan	Trojan.GenericKD.38792928
FireEye	Generic.mg.a1fd612301b8f450
ALYac	Trojan.GenericKD.38792928
Cylance	Unsafe
Sangfor	Trojan.Win32.GenericKD.38792928
Cybereason	malicious.75c64b
Cyren	W32/Trojan.FZFR-0292
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Generic-9917008-0
BitDefender	Trojan.GenericKD.38792928
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Avast	Win32:Sality [Inf]
Ad-Aware	Trojan.GenericKD.38792928
Emsisoft	Trojan.GenericKD.38792928 (B)
Comodo	Virus.Win32.Virut.Ce@1fy3nv
McAfee-GW-Edition	BehavesLike.Win32.Sality.ht
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.38792928
Jiangmin	Trojan.Generic.hdvbq
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=80)
Arcabit	Trojan.Generic.D24FEEE0
Microsoft	Trojan:Script/Phonzy.A!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!A1FD612301B8
VBA32	Trojan.Wacatac
Malwarebytes	Malware.AI.3777324860
TrendMicro-HouseCall	TROJ_GEN.R007H0CB122
Rising	Trojan.Generic@AI.92 (RDML:ip6YivAGd93K+T6ouGTcyg)
Yandex	Win32.Virut.Y.Gen
Ikarus	Trojan.Patched_c
MaxSecure	Trojan.Patched
Fortinet	W32/PossibleThreat
BitDefenderTheta	Gen:NN.ZexaF.34638.Hq0@ayqqM4mi
AVG	Win32:Sality [Inf]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.3777324860?

Malware.AI.3777324860 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X