Malware

What is “Malware.AI.3780130666”?

Malware Removal

The Malware.AI.3780130666 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3780130666 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • At least one process apparently crashed during execution
  • Creates RWX memory
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.3780130666?


File Info:

name: 0A4B666F32E013EF80EF.mlw
path: /opt/CAPEv2/storage/binaries/65c433c44c084eb7a42ac811b771025256c341fb82841d32fc14bb27bec6fc8a
crc32: CBD4C00A
md5: 0a4b666f32e013ef80ef3d487c714bd8
sha1: e9a427fa85108598b4d13a4e7d0681217c8486c9
sha256: 65c433c44c084eb7a42ac811b771025256c341fb82841d32fc14bb27bec6fc8a
sha512: 6db2c806c8ad09e5268e2f336b6851ae301fefe5a1fac199de2a12e899845b63cca6d7d6a1f1c7a1716f748660897f1b27a590ecae8ffbdd9f1d854d1ab8fb11
ssdeep: 768:kKEExpGhsuBjBddPP3lLuzZPKqbQGdfYbC26TM:npTCdPP3lLuBZbQwYbCnTM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18C132C59BE258CF7EA52533E84E7C7762B3DF1814A234B73B730FB344A136922099246
sha3_384: 2466a28615a9c65e9386a21ca2cd43454d21f706f0cdc349a78e16c406d4a34950f27124f14e498591d1df392508a8ef
ep_bytes: 83ec1cc7042402000000ff159c814000
timestamp: 2018-09-13 18:12:06

Version Info:

0: [No Data]

Malware.AI.3780130666 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Symmi.4!c
Elasticmalicious (high confidence)
FireEyeGeneric.mg.0a4b666f32e013ef
CylanceUnsafe
AlibabaTrojan:Win32/Rozena.d9be2517
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderThetaGen:NN.ZexaF.34084.c0Y@aCwyK2c
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Rozena.AFG
APEXMalicious
Paloaltogeneric.ml
NANO-AntivirusTrojan.Win32.Mlw.fhojwf
AvastWin32:Malware-gen
SophosMal/Generic-S
DrWebPowerShell.DownLoader.36
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.pm
SentinelOneStatic AI – Malicious PE
JiangminTrojan.CoinMiner.kv
MaxSecureTrojan.Malware.300983.susgen
AviraHEUR/AGEN.1205510
Antiy-AVLTrojan/Generic.ASMalwS.2820A23
MicrosoftTrojan:Win32/Occamy.C65
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C2745149
Acronissuspicious
McAfeeArtemis!0A4B666F32E0
VBA32Trojan.Tiggre
MalwarebytesMalware.AI.3780130666
TrendMicro-HouseCallTROJ_GEN.R002H0CLA21
TencentWin32.Trojan.Symmi.Fih
YandexTrojan.GenAsa!UBoxCT4vfK8
IkarusTrojan.Win32.Rozena
eGambitUnsafe.AI_Score_99%
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
PandaTrj/GdSda.A

How to remove Malware.AI.3780130666?

Malware.AI.3780130666 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment