Malware

Should I remove “Malware.AI.3927986274”?

Malware Removal

The Malware.AI.3927986274 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3927986274 virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

How to determine Malware.AI.3927986274?


File Info:

crc32: E3A5F96A
md5: eef9673c2b8d5049d928e243369694d2
name: EEF9673C2B8D5049D928E243369694D2.mlw
sha1: d9a594d0c710c18042eae2733ebb1940cb0cc6f4
sha256: 30033b8c0e34868205f2fbf635ac9e8168a91db5ce89fe4113d5aa853f08888b
sha512: 0d0a3e87b7f5362f4ce8bfbe989b9199a548a44924319dfb893a736ab9f2ab873b926253a44a2bf58a2797de9a697d12bcce775c4030e8303f90cf28037523b4
ssdeep: 96:QtTcnngncTXghZd5WeOU4GQsPb5CyeYWSUqK4pWlvTYLLLLsUi/hjGLR:QpGWcTQvbqFzKb9VfKBZ2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.3927986274 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 0053178a1 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader10.8528
CynetMalicious (score: 100)
ALYacTrojan.Ppatre.Gen.1
CylanceUnsafe
ZillyaDownloader.Waski.Win32.8646
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan-Downloader ( 0053178a1 )
Cybereasonmalicious.c2b8d5
CyrenW32/Upatre.LR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDownloader.Waski.AJ
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Downloader.Upatre-9886864-0
KasperskyVHO:Trojan-Downloader.Win32.Convagent.gen
BitDefenderTrojan.Ppatre.Gen.1
MicroWorld-eScanTrojan.Ppatre.Gen.1
TencentMalware.Win32.Gencirc.10b0cec3
Ad-AwareTrojan.Ppatre.Gen.1
SophosML/PE-A + Troj/Upatre-XO
ComodoTrojWare.Win32.TrojanDownloader.Upatre.AX@7t0ehr
BitDefenderThetaAI:Packer.DD8AEA1E1D
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_UPATRE.SM37
McAfee-GW-EditionBehavesLike.Win32.Generic.xm
FireEyeGeneric.mg.eef9673c2b8d5049
EmsisoftTrojan.Ppatre.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cdnmu
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.2616CE8
MicrosoftTrojan:Win32/Zbot.DC!MTB
ArcabitTrojan.Ppatre.Gen.1
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmTrojan-Downloader.Win32.Small.gen
GDataWin32.Trojan-Downloader.Upatre.BJ
TACHYONBanker/W32.Convagent.23498
AhnLab-V3Trojan/Win32.Upatre.R256307
Acronissuspicious
McAfeeGenericRXLV-NU!EEF9673C2B8D
MAXmalware (ai score=86)
VBA32Trojan.Downloader
MalwarebytesMalware.AI.3927986274
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
RisingTrojan.Generic@ML.100 (RDML:mzUq52APr0uFYhFsETMlwA)
YandexTrojan.GenAsa!w6f6bF9mr2E
IkarusTrojan-Downloader.Win32.Waski
MaxSecureTrojan.Upatre.Gen
FortinetW32/Tiny.NIV!tr
AVGWin32:TrojanX-gen [Trj]

How to remove Malware.AI.3927986274?

Malware.AI.3927986274 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment