Malware

Malware.AI.3920815866 removal

Malware Removal

The Malware.AI.3920815866 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3920815866 virus can do?

  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Deletes executed files from disk
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3920815866?


File Info:

name: B071F94D7A088ABA6844.mlw
path: /opt/CAPEv2/storage/binaries/e8c8cdf6805200bff81d5b10ffbe6a32afc7a00e8c80bab2e47ff08a6884c25d
crc32: 48965296
md5: b071f94d7a088aba68446728fb58b9c4
sha1: a1c41d66fdce4b8bffd545fbb11e4cec03e2b17d
sha256: e8c8cdf6805200bff81d5b10ffbe6a32afc7a00e8c80bab2e47ff08a6884c25d
sha512: 65384c0d33d4ad64aa48deeabdf0094f84d21228cb99f22110e43fb72f00097be7fc8a434108ee905dd7e28529de3696194ecc0aabc79e1ee71d7fd9dcb8b8cc
ssdeep: 3072:LB6zAm0HhaS496Afz0Z2TTNTJTCN5gTGhSkT5dgsUGOgkBFVYbsVTHuGETXvOTs7:LB60m0Hhb4sAfz0c85p8mlxmaa96Gs3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CB24865F40170B94E7385370CE5931A781E839097C97EABFFDD92A8305B91E9E06EA31
sha3_384: 1351abb16e96b06d3643437c6fc19165d0a22d371306facf32fc4c8259f3c31bdce9097f88698ac27b90c21d259e10ea
ep_bytes: e8e3feffff33c050505050e8422b0000
timestamp: 2009-06-30 06:15:12

Version Info:

0: [No Data]

Malware.AI.3920815866 also known as:

BkavW32.Common.9A478B40
LionicHacktool.Win32.HiddenStart.3!c
ClamAVWin.Trojan.304426-1
MalwarebytesMalware.AI.3920815866
ZillyaAdware.BrowseFox.Win32.235647
SangforTrojan.Win32.Hiddenstart.Vk3v
CrowdStrikewin/grayware_confidence_90% (W)
ESET-NOD32a variant of Win32/HiddenStart.A potentially unsafe
APEXMalicious
CynetMalicious (score: 100)
TrendMicroHackTool.Win32.HiddStart.C
SentinelOneStatic AI – Suspicious SFX
GoogleDetected
Kingsoftmalware.kb.a.998
GDataWin32.Application.HStart.A
Cylanceunsafe
TrendMicro-HouseCallHackTool.Win32.HiddStart.C
RisingPUA.HiddenStart!8.573 (CLOUD)
YandexRiskware.HiddenStart!HHU885XxvD0
FortinetRiskware/HiddenStart
DeepInstinctMALICIOUS

How to remove Malware.AI.3920815866?

Malware.AI.3920815866 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment