Malware.AI.3827926788 (file analysis)

The Malware.AI.3827926788 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3827926788 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3827926788?


File Info:
name: 0B1B1E812565A663C981.mlw
path: /opt/CAPEv2/storage/binaries/ade1d7a7b6deb1050324e4800447077b31775552632a3d60f090b9b6d5dd44d8
crc32: B7834FE8
md5: 0b1b1e812565a663c981c277b5e74043
sha1: 6b7c03bfdc022cc8407f31019d617c6e66ea996d
sha256: ade1d7a7b6deb1050324e4800447077b31775552632a3d60f090b9b6d5dd44d8
sha512: 9e2fc604b09b6057ca8c9af5430ab329967e6e5760eb624e266e21ddf919e1eaa6ab0d7b9c65ab4d58434575e567a5db86a61865c2d849150c3142e89d528d3a
ssdeep: 12288:X9hj1Te3+CwtdnPNm8QkRSL1n8pETSFQk6izkGtOTwupfoZk:X9hjU+CGPNm8Qk8n2mizkGYTw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AFD45B1137D1E03AC1B231F1866AE77565BEA8305E32568B6BC40B7D2F349919F2932F
sha3_384: d65f0feecb168e7d2419888cfb379ec2f365da11217094a8ed78012697255f2e8dff27e91555d76b2498762dbcbf6bcf
ep_bytes: e8da880000e979feffff8bff558bec51
timestamp: 2012-02-10 13:49:30

Version Info:
0: [No Data]

Malware.AI.3827926788 also known as:

Lionic	Trojan.Win32.Inject.lPPF
DrWeb	Trojan.Inject1.23081
MicroWorld-eScan	Gen:Variant.Zusy.40772
FireEye	Generic.mg.0b1b1e812565a663
ALYac	Gen:Variant.Zusy.40772
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Inject.9ca05c0d
K7GW	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZexaF.34294.LuW@aCtQ@Sai
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H0CKQ21
Kaspersky	Trojan.Win32.Inject.akqbk
BitDefender	Gen:Variant.Zusy.40772
NANO-Antivirus	Trojan.Win32.Inject.rqwqz
Avast	Win32:Evo-gen [Susp]
Rising	Trojan.Generic@ML.94 (RDMK:j7hE5cgriSxnfm++8DOOsA)
Ad-Aware	Gen:Variant.Zusy.40772
McAfee-GW-Edition	BehavesLike.Win32.AdwareKuai.jh
Emsisoft	Gen:Variant.Zusy.40772 (B)
Ikarus	Trojan-Dropper.Win32.Injector
GData	Gen:Variant.Zusy.40772
Jiangmin	TrojanDropper.Injector.aepl
Avira	HEUR/AGEN.1111300
Antiy-AVL	Trojan/Generic.ASMalwS.139B17
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!0B1B1E812565
VBA32	TrojanDropper.Injector
Malwarebytes	Malware.AI.3827926788
APEX	Malicious
Tencent	Malware.Win32.Gencirc.10becd10
Yandex	Trojan.GenAsa!iA9TGV06k28
MAX	malware (ai score=89)
Fortinet	W32/PossibleThreat
AVG	Win32:Evo-gen [Susp]
Cybereason	malicious.12565a
Panda	Trj/CI.A

How to remove Malware.AI.3827926788?

Malware.AI.3827926788 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X