Malware

Should I remove “Malware.AI.3913193307”?

Malware Removal

The Malware.AI.3913193307 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3913193307 virus can do?

  • A file was accessed within the Public folder.
  • Uses Windows utilities for basic functionality
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Compiles .NET code into an executable and executes it
  • Deletes executed files from disk
  • Uses csc.exe C# compiler to build and execute code
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.3913193307?


File Info:

name: 6BFF48C10C1B191E974A.mlw
path: /opt/CAPEv2/storage/binaries/5d8c191ffc31179d710e73bb4de785168798704478664a231c06117b3b9da373
crc32: 6CF33714
md5: 6bff48c10c1b191e974a80ee5c8efd11
sha1: 1c04c8a566190a251eb5070b012ec6a6bc54fa81
sha256: 5d8c191ffc31179d710e73bb4de785168798704478664a231c06117b3b9da373
sha512: 1377b895eb473c112da2639b8d263ca68d683b09dea219a67a18659f0350e0ec532200419ef41e638560a5fad0250d977a5edf1bbea00aaac6e6dbbfc1f42493
ssdeep: 768:l3Kd1V4zbmlH8kIz9s0H7AOv7zlY+2u62U3snu404ewov6n6qzHmVoTIk4zq63QR:VKp42jbeYUzck
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FAA45AA039BD124DF171AEF7B784FBA14E7FEAB65A8A14C4B8001B045613E47C9A0777
sha3_384: 119c7126e0ff88b5cf9197dbf18fd3795b08b1c26b763288149a509533b7e58cfb55e4aba8758452a1b0b95ef23750f7
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-04-17 04:56:00

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: x359y.exe
LegalCopyright:
OriginalFilename: x359y.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Malware.AI.3913193307 also known as:

BkavW32.AIDetectMalware.CS
LionicVirus.MSIL.Lamer.n!c
tehtrisGeneric.Malware
DrWebMSIL.Cola.1
MicroWorld-eScanTrojan.GenericKDZ.94672
CAT-QuickHealW32.Lamer.M3
SkyhighBehavesLike.Win32.Generic.gz
McAfeeGenericRXAO-XB!6BFF48C10C1B
MalwarebytesMalware.AI.3913193307
ZillyaTrojan.RibajGen.Win32.1
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaVirus:MSIL/CryptInject.f54babe4
K7GWTrojan ( 00544e311 )
K7AntiVirusTrojan ( 00544e311 )
ArcabitTrojan.Generic.D171D0
BitDefenderThetaGen:NN.ZemsilF.36744.Dm0@ay0!xRm
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Ribaj.D
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Barys-7725442-0
KasperskyHEUR:Virus.MSIL.Lamer.gen
BitDefenderTrojan.GenericKDZ.94672
NANO-AntivirusTrojan.Win32.Kazy.elhoip
AvastWin32:MalwareX-gen [Trj]
TencentMsil.Virus.Ribaj.Iajl
EmsisoftTrojan.GenericKDZ.94672 (B)
F-SecureTrojan.TR/Dropper.MSIL.Gen
VIPRETrojan.GenericKDZ.94672
TrendMicroVirus.MSIL.RIBAJ.SMW.orig
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.6bff48c10c1b191e
SophosMSIL/Ribaj-A
SentinelOneStatic AI – Malicious PE
JiangminVirus.MSIL.Lamer.a
VaristW32/MSIL_Ribaj.B.gen!Eldorado
AviraTR/Dropper.MSIL.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/MSIL.Ribaj.a
Kingsoftmalware.kb.c.1000
XcitiumVirus.MSIL.Ribaj.F@7oybry
MicrosoftTrojan:Win32/CoinMiner!pz
ZoneAlarmHEUR:Virus.MSIL.Lamer.gen
GDataMSIL.Virus.Ribaj.B
GoogleDetected
AhnLab-V3Trojan/Win32.CryptInject.R267085
VBA32Virus.MSIL.Lamer.1
ALYacTrojan.GenericKDZ.94672
TACHYONWorm/W32.MSILamer
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallVirus.MSIL.RIBAJ.SMW.orig
RisingTrojan.Ribaj!1.B577 (CLASSIC)
IkarusVirus.MSIL.Ribaj
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Ribaj.D
AVGWin32:MalwareX-gen [Trj]
Cybereasonmalicious.566190
DeepInstinctMALICIOUS

How to remove Malware.AI.3913193307?

Malware.AI.3913193307 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment