Malware

Malware.AI.3978385289 removal guide

Malware Removal

The Malware.AI.3978385289 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3978385289 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • The binary likely contains encrypted or compressed data.
  • Steals private information from local Internet browsers
  • Attempts to modify proxy settings

How to determine Malware.AI.3978385289?


File Info:

crc32: 7D77BF43
md5: 4ea883db982a7e48ea8199f0d7b4e933
name: 4EA883DB982A7E48EA8199F0D7B4E933.mlw
sha1: 3bbf3947e800cbeac248217568a548d3c3f9f7af
sha256: f182ddf05978718be5c7caadadd0f29413adb5f85d938e4350fcb7ceeba31761
sha512: 530321e48c02e8904ace2b4f6b37f194f04a3d2cd1a1d4f9c55e69abb52fb4c3efd466360e1bb99d339122d9f91e238722a43538aefea80e855f90a4261938e8
ssdeep: 6144:Pc8UzN0TDdIrD1w8ScpijCGdfQMNe8Bo+xaD6WDJpf9EuzMluXBpsP3cTZW:rUz6fyrDC8ScpijCrMNNBoXDbWubfDt
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Realhard - Network 2019
Assembly Version: 1.0.0.0
InternalName: VindictusVNLauncher.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments: VindictusVN Private Server
ProductName: VindictusVN
ProductVersion: 1.0.0.0
FileDescription: VindictusVN Launcher
OriginalFilename: VindictusVNLauncher.exe

Malware.AI.3978385289 also known as:

CynetMalicious (score: 85)
ALYacTrojan.GenericKD.36426508
CylanceUnsafe
AlibabaHackTool:Win32/RansomX.4e627bd6
K7GWUnwanted-Program ( 005609781 )
K7AntiVirusUnwanted-Program ( 005609781 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/GameHack.AOM potentially unsafe
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan-Ransom.MSIL.Atom.gen
BitDefenderTrojan.GenericKD.36426508
NANO-AntivirusTrojan.Win32.Ransom.iodfez
MicroWorld-eScanTrojan.GenericKD.36426508
Ad-AwareTrojan.GenericKD.36426508
SophosGeneric PUA DL (PUA)
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Atom.R002C0WC521
McAfee-GW-EditionGenericRXNU-KP!4EA883DB982A
FireEyeTrojan.GenericKD.36426508
EmsisoftTrojan.GenericKD.36426508 (B)
JiangminTrojan.MSIL.vyrr
AviraTR/Atom.hvbpv
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Generic.D22BD30C
AegisLabTrojan.MSIL.Atom.j!c
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Atom.gen
GDataTrojan.GenericKD.36426508
AhnLab-V3Malware/Win32.Generic.R372786
McAfeeGenericRXNU-KP!4EA883DB982A
MAXmalware (ai score=89)
MalwarebytesMalware.AI.3978385289
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Atom.R002C0WC521
RisingRansom.Atom!8.E464 (CLOUD)
FortinetRiskware/Atom
AVGWin32:RansomX-gen [Ransom]
Qihoo-360Win32/Ransom.Generic.HgIASP8A

How to remove Malware.AI.3978385289?

Malware.AI.3978385289 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment