Malware

Malware.AI.3946235674 removal instruction

Malware Removal

The Malware.AI.3946235674 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3946235674 virus can do?

  • Performs HTTP requests potentially not found in PCAP.
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Deletes executed files from disk

How to determine Malware.AI.3946235674?


File Info:

name: 5D358CFA3287F0DE21CE.mlw
path: /opt/CAPEv2/storage/binaries/d95cc580e3c95dbd2dcd01ae140d5f3ec858a2bd10013ce4ed5b30130643d089
crc32: 38D86477
md5: 5d358cfa3287f0de21ce9a27f1bd3388
sha1: d4973f9ce6f3833317c70247ebc9b9ddca056fd7
sha256: d95cc580e3c95dbd2dcd01ae140d5f3ec858a2bd10013ce4ed5b30130643d089
sha512: f6ca2a5190ba61fb846c708971f9e5a7ae093e0b38df3c8aaac6ae8e6c974384384cd00106bb951c140879f9753fa622ee18d639b5f711bc333b37393ccac536
ssdeep: 12288:1MrLy90yBzz/d1HvUkhCyW1Pux0XgJveYBG7gWoXMQepe3S2+rGHaw5yuJea:6yNdmkhCyWJuxTJD/t3GG6wZJea
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T102F42263ABD99576DCF52B7208FA02D3073BBCA68A74869B17C1A85F0C725C1E071727
sha3_384: 4b741a6b5678303aea04aa2898381d1cf3012be847c5c04be4df3c6b9ccadb83839e41c76815e130b537b1d29ad8a094
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.3946235674 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanGen:Heur.Crifi.1
ClamAVWin.Packed.Lazy-9958163-0
FireEyeGen:Heur.Crifi.1
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeArtemis!5D358CFA3287
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0057994f1 )
AlibabaTrojanSpy:Win32/Stealer.0be99c83
K7GWTrojan-Downloader ( 0057994f1 )
Cybereasonmalicious.ce6f38
VirITTrojan.Win32.Genus.STD
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
CynetMalicious (score: 99)
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderGen:Heur.Crifi.1
NANO-AntivirusTrojan.Win32.SmokeLoader.jxaglw
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Clipbanker.Zimw
EmsisoftGen:Heur.Crifi.1 (B)
F-SecureTrojan.TR/ATRAPS.Gen
DrWebTrojan.Siggen19.32857
VIPREGen:Heur.Crifi.1
TrendMicroTrojanSpy.Win32.REDLINE.YXDH5Z
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
Trapminemalicious.moderate.ml.score
SophosTroj/PlugX-EC
SentinelOneStatic AI – Malicious SFX
GDataWin32.Trojan.PSE.9TLXQ0
JiangminTrojan.Generic.ekdes
AviraTR/Agent_AGen.wukhm
Antiy-AVLTrojan[Downloader]/Win32.Amadey
ArcabitTrojan.Crifi.1
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:Win32/plugx!pz
GoogleDetected
AhnLab-V3Trojan/Win.TrojanX-gen.R585280
Acronissuspicious
ALYacGen:Heur.Crifi.1
MAXmalware (ai score=89)
MalwarebytesMalware.AI.3946235674
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXDH5Z
RisingDownloader.Amadey!8.125AC (TFE:5:5THvZBcKOfP)
YandexTrojan.Disabler!G6z7qDxyklM
IkarusTrojan.Spy.Stealer
FortinetMSIL/Disabler.DR!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Malware.AI.3946235674?

Malware.AI.3946235674 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment