Malware

How to remove “Malware.AI.3973607242”?

Malware Removal

The Malware.AI.3973607242 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3973607242 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3973607242?


File Info:

name: 85E323C4CEDF71D422C7.mlw
path: /opt/CAPEv2/storage/binaries/bb723d6df70b4acd92e83ffaa91ffc617ecf877de0a4847d85c7065c6ffac620
crc32: 22F37AD6
md5: 85e323c4cedf71d422c72f50d9972271
sha1: 983390f72485ad13bc03af7c859d68fdec4bbeaa
sha256: bb723d6df70b4acd92e83ffaa91ffc617ecf877de0a4847d85c7065c6ffac620
sha512: 4c525d5f636847cf55f71ff15b4e04c282e75e8786cf871becf2be9b7908baa2cc94fc574c7c3d4e679028196612e859d75d35c60acbd98dc21ab98812b3934e
ssdeep: 3072:SozoHUwOE8hNZc1JRr/R8EG78xtHFgtw7qw6y0JMdWxEKz1/fqG11:8HpaIJpRm8xJFgtw7v01z1aG1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T171B67C8338FFD033D4F57032D728D43434377D252A1ABC8175AA3BAEE6906A4D6A9719
sha3_384: 7da0bd7f18b1733abce6aef4b7b3bb3c6fc916cc5b8e06cc6e83ef9d6952d075a4d116743ef3125a2711a0a20d4734fc
ep_bytes: e888310000e9a4feffff558bec83ec08
timestamp: 2023-08-12 06:16:43

Version Info:

Comments: Bashful scansion syphilis quicker fork
CompanyName: Idealisations
FileDescription: Metamorphoses ostensibly
FileVersion: 7.35.64.0
InternalName: Teases plodded
LegalCopyright: Copyright © Romanticising emigration sterns unpoetical
LegalTrademarks: Steadygoing wheedled invalids antenna emirate
OriginalFilename: Greetings
ProductName: Monsieur jock
ProductVersion: 7.35.64.0
Translation: 0x081a 0x081a

Malware.AI.3973607242 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Convagent.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.336997
FireEyeGeneric.mg.85e323c4cedf71d4
ALYacGen:Variant.Zusy.481472
MalwarebytesMalware.AI.3973607242
VIPREGen:Variant.Fragtor.336997
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/GenKryptik.b372764e
Cybereasonmalicious.72485a
BitDefenderThetaGen:NN.ZexaF.36350.@t3@aedxXKli
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.GGPO
APEXMalicious
KasperskyHEUR:Trojan-Spy.Win32.Stealer.gen
BitDefenderGen:Variant.Fragtor.336997
AvastWin32:PWSX-gen [Trj]
EmsisoftGen:Variant.Fragtor.336997 (B)
F-SecureTrojan.TR/AD.RedLineSteal.bypcx
TrendMicroTrojanSpy.Win32.REDLINE.YXDHLZ
McAfee-GW-EditionBehavesLike.Win32.Trojan.vz
Trapminemalicious.high.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Fragtor.336997
GoogleDetected
AviraTR/AD.RedLineSteal.bypcx
MAXmalware (ai score=88)
Antiy-AVLTrojan/Win32.GenKryptik
ZoneAlarmHEUR:Trojan-Spy.Win32.Stealer.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
McAfeeArtemis!85E323C4CEDF
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXDHLZ
RisingBackdoor.Convagent!8.123DC (TFE:5:XdqpnXhbowG)
IkarusTrojan.Win32.Ircbrute
FortinetW32/GenKryptik.GGPO!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.3973607242?

Malware.AI.3973607242 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment