Malware.AI.3906054899 malicious file

The Malware.AI.3906054899 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3906054899 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.3906054899?


File Info:
name: BDA444634D63133E4677.mlw
path: /opt/CAPEv2/storage/binaries/387fbfe56f42baa55fb3a4b0072ec12444e75c21cd09d8a83ffb18fbe68ee18d
crc32: F8B5E59A
md5: bda444634d63133e467788d20d17e28e
sha1: 76ba9fffbad9a653fbcf4be7a4408e5768ebde6c
sha256: 387fbfe56f42baa55fb3a4b0072ec12444e75c21cd09d8a83ffb18fbe68ee18d
sha512: af342d467dff73f0ca0039610c07862779e4610bb7d074071d52e9caf4f0e30efc7a927cfac101cb0fd5b8f2242ad4278256e89a3a475d2a437dc0e6bbd69c0f
ssdeep: 12288:1zmLfQqioK/p2Br/ZU2dlDDFPvT4JcMx6OyQaN888888888888W888888888888b:lmLfBioK/p2Br/BJqaMYa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120C48E22E3D24437D1731A799C6B85946D267E203EE4E84A2EF4DF4C5F3D7813A39292
sha3_384: 8fd56ac4259f9990aa146e937bf45d1245da3bb5f8896c5150ab35e218b3058bfe35c51639730098615030617731aaab
ep_bytes: 558bec83c4f0b818b04700e828acf8ff
timestamp: 2012-01-22 19:09:15

Version Info:
CompanyName: Gicanokes Ltd.
FileDescription: Rogef
FileVersion: 2.9.11.88
InternalName: Muha
LegalCopyright: Gicanokes Ltd. ©
LegalTrademarks: Gicanokes Ltd. trademark 2011-2015
OriginalFilename: muhakasif.exe
ProductName: Tapafoner Habohuto 16 Cocu
ProductVersion: 1.4.35.95

Malware.AI.3906054899 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.DealPly.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.DealPly.2.Gen
FireEye	Generic.mg.bda444634d63133e
McAfee	RDN/Generic PUP.x
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Adware ( 005380ab1 )
Alibaba	AdWare:Win32/DealPly.bf6989bc
K7GW	Adware ( 005380ab1 )
Cybereason	malicious.34d631
Cyren	W32/DealPly.BO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/DealPly.UO potentially unwanted
APEX	Malicious
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DealPly.gen
BitDefender	Adware.DealPly.2.Gen
Avast	Win32:DealPly-AJ [Adw]
Tencent	Win32.Adware.Dealply.Pjdk
Emsisoft	Adware.DealPly.2.Gen (B)
Zillya	Adware.DealPly.Win32.464055
TrendMicro	Adware.Win32.DEALPLY.SMD
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
Sophos	DealPly Updater (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Adware.Agent.alhm
Avira	HEUR/AGEN.1114815
Microsoft	PWS:Win32/Zbot!ml
ViRobot	Adware.Dealply.582144.ADA
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.DealPly.gen
GData	Adware.DealPly.2.Gen
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win.DealPly.R439892
BitDefenderTheta	Gen:NN.ZelphiF.34182.JK0@aqO699ei
MAX	malware (ai score=64)
VBA32	Adware.DealPly
Malwarebytes	Malware.AI.3906054899
TrendMicro-HouseCall	Adware.Win32.DEALPLY.SMD
Rising	Trojan.Ymacco!8.11BE1 (CLOUD)
Ikarus	PUA.DealPly
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agen.9714!tr
AVG	Win32:DealPly-AJ [Adw]
Panda	Trj/Genetic.gen
CrowdStrike	win/grayware_confidence_100% (W)

How to remove Malware.AI.3906054899?

Malware.AI.3906054899 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X