About “Malware.AI.3836059088” infection

The Malware.AI.3836059088 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3836059088 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.3836059088?


File Info:
crc32: E6585F66
md5: c104f0e3135ad2c80673b92fb76c0244
name: C104F0E3135AD2C80673B92FB76C0244.mlw
sha1: 65b073627e9c26f520f306c340093e10d9930748
sha256: f20ff3e580b39571af731e80777ee8d005e3d303ff2fad6aefcf8961ac7d478a
sha512: 7af3833a05c998e12ac0836399e995cb970de3d81e4b710c346ccd604f1c629d5dc6034c4067e1055884cbb3e9c16515faf8ecccf026d487b92eb1f0ff28bba7
ssdeep: 24576:QDGA/RgFsks1hzmw81YNkyZpHX/WvU8mhynb:QL/RgFsksf610kynX/mUGb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2015
InternalName: PatchUi.exe
FileVersion: 2, 0, 0, 321
CompanyName: x98d8x4e91x9601x5b98x65b9x8bbax575b
Comments: Www.ChinaPYG.CoM
ProductName: PatchUi
ProductVersion: 2, 0, 0, 321
FileDescription: Baymax Patch Tools
OriginalFilename: PatchUi.exe
Translation: 0x0409 0x04b0

Malware.AI.3836059088 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.45810438
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Baymax.135
K7GW	Unwanted-Program ( 00568e2f1 )
K7AntiVirus	Unwanted-Program ( 00568e2f1 )
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.GenericKD.45810438
MicroWorld-eScan	Trojan.GenericKD.45810438
Ad-Aware	Trojan.GenericKD.45810438
Sophos	Generic PUA GF (PUA)
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.c104f0e3135ad2c8
Emsisoft	Trojan.GenericKD.45810438 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1BEB3B6
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Glupteba!ml
Gridinsoft	Trojan.Win32.Downloader.oa!s1
SUPERAntiSpyware	PUP.DllInject/Variant
GData	Trojan.GenericKD.45810438
McAfee	GenericRXGB-TK!C104F0E3135A
MAX	malware (ai score=89)
VBA32	BScope.Trojan.Wintrim
Malwarebytes	Malware.AI.3836059088
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10b1a553
Yandex	Trojan.GenAsa!rbiekdS6Qhs
Ikarus	PUA.HackTool.Patcher
Fortinet	W32/GenericRXBM.WQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Malware.AI.3836059088?

Malware.AI.3836059088 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X