Malware

Malware.AI.3802684697 removal guide

Malware Removal

The Malware.AI.3802684697 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3802684697 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Attempts to modify proxy settings
  • Appears to use command line obfuscation
  • A script or command line contains a long continuous string indicative of obfuscation
  • Harvests cookies for information gathering
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3802684697?


File Info:

name: 1ED3C55551ABA1CC2419.mlw
path: /opt/CAPEv2/storage/binaries/95ecdd861d9c0dc31105e01cb9cb533a2e4f176e70f6964173c786f8790e8eae
crc32: A32B67C4
md5: 1ed3c55551aba1cc2419a9032610c9df
sha1: d660996068d123378f1746fa6a01741b26cdbc03
sha256: 95ecdd861d9c0dc31105e01cb9cb533a2e4f176e70f6964173c786f8790e8eae
sha512: 3a157fe4c4270ce747f2adcfd02ab0211f3648a10e32d8a66ab42e0fdfa96119f5086a40abd459b2cf6fab3edea3ada595bba29418ba27bcdf4b9939d8142d56
ssdeep: 49152:tqWtA+rlNz8MiO7nkw5TF3KP/rAk+lXpMv/hQTt6FvFPdt:wWtHR2FwnO1eMBQTcFtPdt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F6C5332363BE5951E3EF6674A6B3168D98B3BF604FAED649A060416C3471F0248B5F33
sha3_384: 23356b17726fc44d6106fbec66db32a760e7a280dcd3b822270ceabbdeb722372830cd19daae442a12f393b36ea16f35
ep_bytes: 68fc456600e8eeffffff000000000000
timestamp: 2020-07-27 14:02:24

Version Info:

Translation: 0x0409 0x04b0
Comments: Tropical zodiac Gemini
CompanyName: 4716 3598 7339 7225
LegalCopyright: ait8Woo7fo
ProductName: Mitsubishi Pajero
FileVersion: 1.00
ProductVersion: 1.00
InternalName: setup
OriginalFilename: setup.exe

Malware.AI.3802684697 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Bulz.4!c
MicroWorld-eScanGen:Variant.Bulz.1676
FireEyeGeneric.mg.1ed3c55551aba1cc
McAfeeArtemis!1ED3C55551AB
MalwarebytesMalware.AI.3802684697
ZillyaTrojan.Indiloadz.Win32.2025
SangforTrojan.Win32.Azden.A
K7AntiVirusTrojan ( 0056bb1e1 )
AlibabaAdWare:MSIL/Indiloadz.d17147b9
K7GWTrojan ( 0056bb1e1 )
Cybereasonmalicious.551aba
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Indiloadz.CA
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:AdWare.MSIL.Indiloadz.ay
BitDefenderGen:Variant.Bulz.1676
NANO-AntivirusTrojan.Win32.DownLoad4.itwuel
AvastWin32:CoinminerX-gen [Trj]
TencentMsil.AdWare.Indiloadz.Fkjl
EmsisoftGen:Variant.Bulz.1676 (B)
F-SecureHeuristic.HEUR/AGEN.1335643
DrWebTrojan.DownLoad4.14023
VIPREGen:Variant.Bulz.1676
McAfee-GW-EditionBehavesLike.Win32.Trojan.vc
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Bulz.1676
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1335643
Antiy-AVLTrojan/Win32.Wacatac
ArcabitTrojan.Bulz.D68C
ZoneAlarmnot-a-virus:AdWare.MSIL.Indiloadz.ay
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.1676
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/GdSda.A
RisingTrojan.Azden!8.F0E3 (TFE:5:8f3bVuZvBrF)
YandexTrojan.Indiloadz!ZJBt9UBj/vE
IkarusTrojan.Win32.Indiloadz
FortinetW32/Indiloadz.CA!tr
BitDefenderThetaGen:NN.ZevbaF.36196.Eo0@aaTNdEhi
AVGWin32:CoinminerX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.3802684697?

Malware.AI.3802684697 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment