About “Malware.AI.3794616201” infection

The Malware.AI.3794616201 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3794616201 virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics
Binary compilation timestomping detected

How to determine Malware.AI.3794616201?


File Info:
name: 2AA530E7949C644A05CB.mlw
path: /opt/CAPEv2/storage/binaries/0d38f9d94681b8e0089c42fb547d90180e2956f1aaf35ad2efdce09d81c565cf
crc32: 2DFE9641
md5: 2aa530e7949c644a05cb92a301a11f45
sha1: ba80653405e1d8d611471c9ddf2f9c85a5a2e019
sha256: 0d38f9d94681b8e0089c42fb547d90180e2956f1aaf35ad2efdce09d81c565cf
sha512: 8ba1a044aae60b14fcd413e760f368c4386637078d874612ae8d86f88aceabfbf8cd7be574e2a63447c55751265de7968cfc8842fb0e508ad5084c3873a54fb7
ssdeep: 3072:ZG1b0DbbOYW13RZzFPk2I111KYTI1Uk1cLto:o1MbQhHMzTy1Kt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C1C38E41B6DAB23BC6AD0E70D561D1E047B3A0EAA815C6C57EC8715FBFA3311A143A37
sha3_384: 15ac375e619c843e7f8105d1e799cd1308023f6e2162ba12f90cede926f4086dae86c6609123969a6ab2effe4f4888e1
ep_bytes: 8bec609ce97f320000316fdbc4776948
timestamp: 2077-08-27 17:45:31

Version Info:
Comments: 
CompanyName: Power Software Ltd
FileDescription: PowerIso
FileVersion: 0.0.0.0
InternalName: PowerIso.exe
LegalCopyright: Copyright ©  2017
LegalTrademarks: 
OriginalFilename: PowerIso.exe
ProductName: PowerIso
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0
Translation: 0x0000 0x04b0

Malware.AI.3794616201 also known as:

Bkav	W32.AIDetectNet.01
tehtris	Generic.Malware
ALYac	Generic.ShellCode.Marte.J.AA2745F0
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.405e1d
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/Agent.CBI
APEX	Malicious
Kaspersky	HEUR:Backdoor.MSIL.Agent.gen
BitDefender	Generic.ShellCode.Marte.J.AA2745F0
MicroWorld-eScan	Generic.ShellCode.Marte.J.AA2745F0
Avast	Win32:Evo-gen [Trj]
Ad-Aware	Generic.ShellCode.Marte.J.AA2745F0
Emsisoft	Generic.ShellCode.Marte.J.AA2745F0 (B)
VIPRE	Generic.ShellCode.Marte.J.AA2745F0
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.2aa530e7949c644a
Jiangmin	Backdoor.MSIL.cooq
Antiy-AVL	Trojan[Backdoor]/MSIL.Agent
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Generic.ShellCode.Marte.J.AA2745F0
ZoneAlarm	HEUR:Backdoor.MSIL.Agent.gen
GData	Generic.ShellCode.Marte.J.AA2745F0
Acronis	suspicious
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.3794616201
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.GCTV!tr
BitDefenderTheta	Gen:NN.ZemsilF.34796.hm0@aCi1PSci
AVG	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Malware.AI.3794616201?

Malware.AI.3794616201 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X