Malware

What is “Malware.AI.3920082804”?

Malware Removal

The Malware.AI.3920082804 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3920082804 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempted to write directly to a physical drive
  • Creates a copy of itself
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3920082804?


File Info:

name: CC3DE1857BB4F41E613C.mlw
path: /opt/CAPEv2/storage/binaries/c9fd72d5635584f5ea2019a36683437008dcb35c2afd859ba1191d462ae5fcaf
crc32: 7D8CDB65
md5: cc3de1857bb4f41e613cb0c41778974c
sha1: 116150cef8865d732ee72506b32b95ec1aacd66c
sha256: c9fd72d5635584f5ea2019a36683437008dcb35c2afd859ba1191d462ae5fcaf
sha512: 24b104d5e1510f157587b5a5f6194ae2980fcbf232a17ca892ac8db2f46ed8f8e62dc750c0354760f98f6f028dd024d29a3b0aa3217df0b233d6aed772864c91
ssdeep: 3072:uOOUlhFs1StpKCN0Ru6DHR0WrVi36wt5m0Sz6C4YFHf52Rn2M:bs1XC2ugHJ5ohPm0Sz6C52dn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BFE3012326462869D0D5927FAB4935CF8FB67D9F2307DECF1E959C0069A0D00E93CE92
sha3_384: a9aefea215e842a17cad58580b0468e64795dd47ac599b2bfdf16ab39f038709595840bed175438f6c3d0b01aa09a4cf
ep_bytes: 558d6c249481ec040100008105006040
timestamp: 2010-12-24 13:01:43

Version Info:

0: [No Data]

Malware.AI.3920082804 also known as:

CyrenCloudW32/Alureon.AL.gen!Eldorado
BkavW32.Common.28B75764
LionicTrojan.Win32.TDSS.lkvA
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Krypt.70
FireEyeGeneric.mg.cc3de1857bb4f41e
SkyhighBehavesLike.Win32.Dropper.cc
ALYacGen:Heur.Krypt.70
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusRootKit ( 004c6bbc1 )
AlibabaTrojanDropper:Win32/Bulta.ef84d412
K7GWRootKit ( 004c6bbc1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.3B3767A420
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Olmarik.AJX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Dropper.Win32.TDSS.uyj
BitDefenderGen:Heur.Krypt.70
NANO-AntivirusTrojan.Win32.Tdss.bqdzk
SUPERAntiSpywareTrojan.Agent/Gen-FakeAlert[RedO]
AvastWin32:Alureon-NK [Trj]
TencentMalware.Win32.Gencirc.11916c4b
Ad-AwareGen:Heur.Krypt.70
EmsisoftGen:Heur.Krypt.70 (B)
F-SecureTrojan.TR/Drop.TDSS.LA
DrWebTrojan.MulDrop1.58463
VIPREGen:Heur.Krypt.70
TrendMicroTROJ_DROPPR.SMP
Trapminemalicious.high.ml.score
SophosMal/TDSSPack-Z
IkarusTrojan-Dropper.Win32.TDSS
JiangminTrojanDropper.TDSS.cge
WebrootW32.Alureon.Rootkit
VaristW32/Alureon.AL.gen!Eldorado
AviraTR/Drop.TDSS.LA
Antiy-AVLTrojan[Dropper]/Win32.TDSS
KingsoftWin32.HeurC.KVMH008.a
MicrosoftTrojan:Win32/Alureon.DX
XcitiumTrojWare.Win32.Olmarik.F@2qha1h
ArcabitTrojan.Krypt.70
ViRobotTrojan.Win.Z.Tdss.148992.B
ZoneAlarmTrojan-Dropper.Win32.TDSS.uyj
GDataGen:Heur.Krypt.70
GoogleDetected
AhnLab-V3Trojan/Win32.Tdss.R2224
McAfeeGeneric Dropper.va.gen.a
MAXmalware (ai score=100)
MalwarebytesMalware.AI.3920082804
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_DROPPR.SMP
RisingTrojan.Alureon!8.227 (TFE:1:abjxih2K3IR)
SentinelOneStatic AI – Suspicious PE
FortinetW32/Tdss.TGP!tr
AVGWin32:Alureon-NK [Trj]
Cybereasonmalicious.ef8865
DeepInstinctMALICIOUS

How to remove Malware.AI.3920082804?

Malware.AI.3920082804 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment