Malware

About “Malware.AI.3962514342” infection

Malware Removal

The Malware.AI.3962514342 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3962514342 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Saami
  • Detects the presence of Wine emulator via function name
  • Detects SunBelt Sandbox through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Deletes its original binary from disk
  • A system process is generating network traffic likely as a result of process injection
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a device
  • Detects VirtualBox through the presence of a registry key
  • Creates a copy of itself

How to determine Malware.AI.3962514342?


File Info:

crc32: B65C069A
md5: 8ce41ec16f86a37da3d3f6c0fdb500bc
name: 8CE41EC16F86A37DA3D3F6C0FDB500BC.mlw
sha1: e5642f6e219d30c76f94119043853090f2e88381
sha256: d93117351b62f7fe0c130efcf5ea418d78109be9187ff79472295f78515371ee
sha512: 1636a3525b906499325f65c7474938949ff6bbb9358eec2217765c45e1c9cb7b8548b9ee8e01a0fcb4bbb15dabe5b37a0becd3f554f9d67713982cf0ce92075f
ssdeep: 3072:4C1g0exJrDwFyIQYg/EcYzK/s1sEtAg0FuntBNpXELRIxe+w80AMAEhOSDr2K:5WtzEFWscR/sPAOnzTewkdDrL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.3962514342 also known as:

BkavW32.FamVT.RazyNHmC.Trojan
K7AntiVirusTrojan ( 004df3301 )
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader19.35750
CynetMalicious (score: 100)
CAT-QuickHealRansom.Tescrypt.A4
ALYacTrojan.Lethic.Gen.14
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojan:Win32/Kryptik.5e4db04c
K7GWTrojan ( 004df3301 )
Cybereasonmalicious.16f86a
BaiduWin32.Trojan.Kryptik.vz
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.EPEN
APEXMalicious
AvastWin32:Dorder-W [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Lethic.Gen.14
NANO-AntivirusTrojan.Win32.Lethic.eanhof
MicroWorld-eScanTrojan.Lethic.Gen.14
TencentWin32.Trojan.Generic.Eflc
Ad-AwareTrojan.Lethic.Gen.14
SophosMal/Wonton-BZ
ComodoTrojWare.Win32.Droma.EQJ@6b1t5k
BitDefenderThetaAI:Packer.569081D621
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CRYPTESLA.SMK1
McAfee-GW-EditionBehavesLike.Win32.Dropper.ch
FireEyeGeneric.mg.8ce41ec16f86a37d
EmsisoftTrojan.Lethic.Gen.14 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Bitman.ik
AviraHEUR/AGEN.1128847
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.1739E6A
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Lethic.B
ArcabitTrojan.Lethic.Gen.14
SUPERAntiSpywareRansom.Filecoder/Variant
GDataTrojan.Lethic.Gen.14
AhnLab-V3Trojan/Win32.Teslacrypt.C1338882
McAfeeRansom-Tescrypt!8CE41EC16F86
MAXmalware (ai score=100)
VBA32BScope.Backdoor.IRC.NgrBot
MalwarebytesMalware.AI.3962514342
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CRYPTESLA.SMK1
RisingTrojan.Generic@ML.100 (RDML:3q8JXfa/hNt4l0qiniFyaA)
YandexTrojan.PR.Lethic!TZtZsA6WKJ8
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.FXWS!tr
AVGWin32:Dorder-W [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.3962514342?

Malware.AI.3962514342 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment