Malware.AI.3802309743 removal guide

The Malware.AI.3802309743 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3802309743 virus can do?

Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.3802309743?


File Info:
name: D95ADCD99C66084D6A89.mlw
path: /opt/CAPEv2/storage/binaries/eb34c80a99ab7a4e16eb1f399793930568f454a3a5baf7c57b25f22607f0bb56
crc32: CEFE309E
md5: d95adcd99c66084d6a897316c0b33906
sha1: 8545a46db0fab0e766db3e962813fc3bcf41e2a3
sha256: eb34c80a99ab7a4e16eb1f399793930568f454a3a5baf7c57b25f22607f0bb56
sha512: 6fc303e32c48f4d744420ebbd889196318e56ff62afef5125c29203cfbe2ae5e429c00d964bcc684acc0fa052531196607de7a09423f715abfbe1050b371c092
ssdeep: 1536:5ZrZx/D4vzAEgmxj4vgS2GosP5Hv2VPXo:5ZrZx/D4vzAEfj4vPXosVOlXo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F8C31852BAA0C096D47582788B779AED973F7C824931429FBF40BD9E1D323916836B4C
sha3_384: e1f52c28061d32b75b4fdc95efa64fe3a931a218f5de9af8e66430e93c67f4da97afc1d3a631a9c745ae7f34378a975a
ep_bytes: 558bec6aff6850384000686228400064
timestamp: 2010-10-13 15:08:59

Version Info:
CompanyName: 
FileDescription: PPTGen MFC Application
FileVersion: 1, 0, 0, 1
InternalName: PPTGen
LegalCopyright: Copyright (C) 2010
LegalTrademarks: 
OriginalFilename: PPTGen.EXE
ProductName: PPTGen Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Malware.AI.3802309743 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.10083631
McAfee	Artemis!D95ADCD99C66
Cylance	Unsafe
Cybereason	malicious.99c660
ESET-NOD32	multiple detections
APEX	Malicious
ClamAV	Win.Worm.Autorun-7105
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.Generic.10083631
NANO-Antivirus	Trojan.Win32.Generic.bbwocj
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10c0cb05
Ad-Aware	Trojan.Generic.10083631
Emsisoft	Trojan.Generic.10083631 (B)
Comodo	Malware@#1u1mdg8g1qef8
DrWeb	Trojan.DownLoader9.4697
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ct
FireEye	Trojan.Generic.10083631
Sophos	Troj/Luiha-BK
Ikarus	Trojan-Downloader.Win32.Kimiki
GData	Trojan.Generic.10083631
Avira	TR/Drop.Agent.28672.34
Arcabit	Trojan.Generic.D99DD2F
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
ALYac	Trojan.Generic.10083631
MAX	malware (ai score=100)
VBA32	Worm.AutoRun
Malwarebytes	Malware.AI.3802309743
Rising	Worm.VBInjectEx!1.99E6 (CLASSIC)
Yandex	Trojan.GenAsa!f3drzORHb2I
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.BK!tr
BitDefenderTheta	Gen:NN.ZexaE.34712.cmW@aa150Ig
AVG	Win32:Malware-gen
Panda	Trj/CI.A

How to remove Malware.AI.3802309743?

Malware.AI.3802309743 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X