About “Malware.AI.3799028838” infection

The Malware.AI.3799028838 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3799028838 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Malware.AI.3799028838?


File Info:
name: FFDDCE2ED497E3403516.mlw
path: /opt/CAPEv2/storage/binaries/a2b088acdd7f1dccaee58b6fcf6a11a1acbf4b95c036e4261e72d17e4c5d8012
crc32: 39EE2C42
md5: ffddce2ed497e3403516ddba92240e7a
sha1: 4ea140d25fb78de04113236f886a440c7afb9c5e
sha256: a2b088acdd7f1dccaee58b6fcf6a11a1acbf4b95c036e4261e72d17e4c5d8012
sha512: c33f8029c422085446f7ba5a1e1599c800c31f233dccced56e9775690df0df2960a2054b1391fb9217012c6eb2af0b93decaec98d20e3e33efe0a121c0787f6a
ssdeep: 1536:qRAKTuauamTvWLNgy3Iqtr8hdC+WWR5RxYdGeFM86OM9tjhS9nP+:eAK6aunyLNgPMs/WWPUdvFM86OM9tjht
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T158733B41A3D89B92F3AE47BA7DB224401BB0F0C65637D35F588498EC6FCBB8605517A3
sha3_384: 7806e0ac5402250caab84f685c46bc0f21d2eb90efab9083ab742e3620d32664e07e3e27a09e182407c426cb5c1578b5
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2089-06-20 09:10:43

Version Info:
Translation: 0x0000 0x04b0
CompanyName: DRun
FileDescription: DRun
FileVersion: 1.0.0.0
InternalName: DRun.dll
LegalCopyright:  
OriginalFilename: DRun.dll
ProductName: DRun
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

Malware.AI.3799028838 also known as:

MicroWorld-eScan	IL:Trojan.MSILZilla.6607
FireEye	IL:Trojan.MSILZilla.6607
ALYac	IL:Trojan.MSILZilla.6607
Cylance	Unsafe
K7AntiVirus	Trojan ( 0058ab741 )
Alibaba	Trojan:MSIL/SharpS_AGen.9d845034
K7GW	Trojan ( 0058ab741 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/SharpS_AGen.A
TrendMicro-HouseCall	TROJ_GEN.R002H09L921
BitDefender	IL:Trojan.MSILZilla.6607
Avast	Win64:InjectorX-gen [Trj]
Tencent	Msil.Trojan.Msilzilla.Eivl
Ad-Aware	IL:Trojan.MSILZilla.6607
Emsisoft	IL:Trojan.MSILZilla.6607 (B)
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
GData	IL:Trojan.MSILZilla.6607
Avira	TR/Redcap.hhdue
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.ShaDumpz.C4830391
McAfee	Artemis!FFDDCE2ED497
Malwarebytes	Malware.AI.3799028838
Ikarus	Trojan.MSIL.Sharps
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/SharpS_AGen.A!tr
Webroot	W32.Trojan.Gen
AVG	Win64:InjectorX-gen [Trj]

How to remove Malware.AI.3799028838?

Malware.AI.3799028838 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X