How to remove “Malware.AI.3975363662”?

The Malware.AI.3975363662 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3975363662 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3975363662?


File Info:
name: 963822FA4E1E9756119A.mlw
path: /opt/CAPEv2/storage/binaries/18d07d97da7ee8d5fd1e53dd6b0de083eface99ff777ae6f095e6b2d61716081
crc32: DF0475E8
md5: 963822fa4e1e9756119a7f18320aa805
sha1: e072df39436360f7cc291c0cd2a911e6cade402b
sha256: 18d07d97da7ee8d5fd1e53dd6b0de083eface99ff777ae6f095e6b2d61716081
sha512: bba24b01130ec6c3ed63ccc8897cc12fbef71e192261b6ec570e2d487af9b7b4e05d3f2d400151bfabd79f38d84071e7212f87330ad8caea5d4be3f4166246c4
ssdeep: 24576:HNR2zaQBt37/CZ0w1PeWnzqhqCC6+PEsR:eUsrC6aEU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB25F8763F43CF66ED6124B6A574052AC8EBBC2AC33D94E72964105FE4512B029723BF
sha3_384: 89c2c4e07fd70185ca2655eaa70a01026441baf69442f1ace56ea09185ddce193f544129fdf590d993fad7c30fc0cd6e
ep_bytes: e8605e0000e989feffffcccccc568b44
timestamp: 2016-01-16 06:27:22

Version Info:
0: [No Data]

Malware.AI.3975363662 also known as:

Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.47498334
McAfee	Artemis!963822FA4E1E
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Packed:Win32/Generic.a457b08a
K7GW	Trojan ( 0056989a1 )
K7AntiVirus	Trojan ( 0056989a1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.AHK.E suspicious
APEX	Malicious
ClamAV	Win.Malware.Autohk-6995517-0
BitDefender	Trojan.GenericKD.47498334
Avast	Win32:Evo-gen [Susp]
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Trojan.GenericKD.47498334
Emsisoft	Trojan.GenericKD.47498334 (B)
Comodo	.UnclassifiedMalware@0
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
FireEye	Generic.mg.963822fa4e1e9756
Sophos	ML/PE-A
Ikarus	PUA.AHK
GData	Win32.Trojan.PSE.15K71AK
Jiangmin	Trojan.Deshacop.iv
MAX	malware (ai score=81)
Arcabit	Trojan.Generic.D2D4C45E
ViRobot	Trojan.Win32.Agent.812032.I
Microsoft	Trojan:Win32/Tiggre!rfn
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R343577
VBA32	Trojan.Hotkeychick
ALYac	Trojan.GenericKD.47498334
Malwarebytes	Malware.AI.3975363662
TrendMicro-HouseCall	TROJ_GEN.R003H06KO21
Rising	Trojan.Generic@ML.100 (RDML:FuaoCr/N38XIO4DFUPh41w)
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/Trojan_AHK
AVG	Win32:Evo-gen [Susp]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.3975363662?

Malware.AI.3975363662 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X