Malware.AI.3913602795 information

The Malware.AI.3913602795 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3913602795 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial language used in binary resources: Portuguese
Authenticode signature is invalid

How to determine Malware.AI.3913602795?


File Info:
name: EBE6D1EE3699C1317D56.mlw
path: /opt/CAPEv2/storage/binaries/d9e7b999fe3bce2fa83cb2d24d95ac760ef59a3f0be4d6c3d2fe5f2964bb9a56
crc32: C9CFE5E6
md5: ebe6d1ee3699c1317d56effdae6b203a
sha1: 11793e69e1b66d7a4a6d840565d552ca6d766be6
sha256: d9e7b999fe3bce2fa83cb2d24d95ac760ef59a3f0be4d6c3d2fe5f2964bb9a56
sha512: c33d4e9d2d4ce45fc524f5cf7d109225ccac5c127236cb8d65646617b4cb2f9eee0bd440f25da689e047299f03aca8728ca8687b9e36ae83a32a39caa54b6369
ssdeep: 768:YQAOzl7s+vHJ/8+PT4hjMp3Khw9fVz1Xjc5eowldC0UkNlTOTktpA3JT:YQHzlIYJ/bPT4zw9Nz1cUo6NNOOA3h
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T13F63AE1235B15073E3CA8A3865E49B03AABD3F905EE644474FF356992D343E2E63970B
sha3_384: 7d5c89bb20d4ff10ee9898ddc9e344a7ec5b1b20b1eb70fd6f6f3aecdf7715448d2b5fa2ab8dc1d0df43b6605ec4cb60
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2019-04-15 09:27:49

Version Info:
Comments: Lock Windows Desktop
CompanyName: AMF
FileDescription: Lock Windows Desktop
FileVersion: 3.0.5.0
InternalName: WinLockDll
LegalCopyright: Copyright © A. Miguel Feijão, 2004
LegalTrademarks: A. Miguel Feijão, 2004
OriginalFilename: WinLockDll.dll
PrivateBuild: 
ProductName: WinLock
ProductVersion: 3.0.5.0
SpecialBuild: 
Translation: 0x0409 0x04b0

Malware.AI.3913602795 also known as:

Bkav	W32.Common.CC43DA79
Lionic	Trojan.Win32.Diztakun.4!c
Elastic	malicious (moderate confidence)
Skyhigh	Artemis
McAfee	Artemis!EBE6D1EE3699
Cylance	unsafe
Zillya	Trojan.Diztakun.Win32.5628
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Trojan:Win32/Diztakun.13571da1
K7GW	Riskware ( 00584baa1 )
Symantec	ML.Attribute.HighConfidence
Kaspersky	HEUR:Trojan.Win32.Diztakun.gen
NANO-Antivirus	Trojan.Win32.Diztakun.hplers
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.1159a82a
F-Secure	Trojan.TR/Diztakun.zcrue
Ikarus	Trojan.Diztakun
Jiangmin	Trojan.Diztakun.dno
Webroot	W32.Malware.gen
Avira	TR/Diztakun.zcrue
Antiy-AVL	Trojan/Win32.Diztakun
ZoneAlarm	HEUR:Trojan.Win32.Diztakun.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Malware-gen.R540979
VBA32	Trojan.Diztakun
Malwarebytes	Malware.AI.3913602795
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H07KP23
Rising	Trojan.Diztakun!8.FE (TFE:6:EJdktXvmvuC)
Yandex	Trojan.Diztakun!O5NPZuH5jvk
MaxSecure	Trojan.Malware.73718646.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.3913602795?

Malware.AI.3913602795 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X