Malware

Malware.AI.3980074545 removal tips

Malware Removal

The Malware.AI.3980074545 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3980074545 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • The binary likely contains encrypted or compressed data.
  • Exhibits behavior characteristic of iSpy Keylogger
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.3980074545?


File Info:

crc32: 817BCF08
md5: 3a80fab870f73a604d8cc6e0361dadab
name: 3A80FAB870F73A604D8CC6E0361DADAB.mlw
sha1: b830107c8b778dbfcc568e8fe3e094f1dcac41ea
sha256: ddf7d80db43dd07f421e875fcb86f143fd9f415ef3e1e0626ed2ae3f07150251
sha512: 8475905b4f67dee2369510ba76df092787270feea7d66e1cc8e868c7d96ceb1f645f66fe1dc5e3a03c93cacebc2b96555ae800e251a57d14aa4086d2691b4580
ssdeep: 6144:Z7rV+JJ8CsHL+SQGG3FdkcKQGiM311ZltBuMWWwq9bksHDAbTcGbga/iwOeJ+3H:hrV+z8BrtlkiF1B9z9kRDUaKwbJ0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 1993-2015 Yukihiro Matsumoto
InternalName: ruby.exe
FileVersion: 2.3.0p0
CompanyName: http://www.ruby-lang.org/
Comments: 2015-12-25
ProductName: Ruby interpreter 2.3.0p0 [i386-mingw32]
ProductVersion: 2.3.0p0
FileDescription: Ruby interpreter (CUI) 2.3.0p0 [i386-mingw32]
OriginalFilename: ruby.exe
Translation: 0x0000 0x04b0

Malware.AI.3980074545 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.40020
FireEyeGeneric.mg.3a80fab870f73a60
CAT-QuickHealTrojan.MsilFC.S17874533
McAfeePacked-OZ!3A80FAB870F7
CylanceUnsafe
AegisLabTrojan.MSIL.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 700000121 )
BitDefenderTrojan.GenericKDZ.40020
K7GWTrojan ( 700000121 )
Cybereasonmalicious.870f73
BitDefenderThetaGen:NN.ZemsilF.34804.wm0@aq8RUpki
CyrenW32/Trojan.FVM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.SRO
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Fareit-6985088-0
KasperskyHEUR:Trojan.MSIL.Generic
AlibabaTrojan:Win32/csharp.ali2000008
NANO-AntivirusTrojan.Win32.Crypt.eroxrv
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.GenericKDZ.40020
EmsisoftTrojan.GenericKDZ.40020 (B)
ComodoMalware@#2er43k2qpo9dy
F-SecureHeuristic.HEUR/AGEN.1105132
DrWebTrojan.PWS.Stealer.17779
ZillyaTrojan.Injector.Win32.545290
McAfee-GW-EditionPacked-OZ!3A80FAB870F7
SophosMal/Generic-R + Mal/Kryptik-AC
IkarusTrojan.Inject
AviraHEUR/AGEN.1105132
Antiy-AVLTrojan/MSIL.Crypt
MicrosoftBackdoor:MSIL/Noancooe.C
ArcabitTrojan.Generic.D9C54
AhnLab-V3Backdoor/Win32.NanoBot.C2056957
ZoneAlarmHEUR:Trojan.MSIL.Generic
GDataTrojan.GenericKDZ.40020
CynetMalicious (score: 100)
VBA32TScope.Trojan.MSIL
ALYacTrojan.GenericKDZ.40020
MAXmalware (ai score=87)
MalwarebytesMalware.AI.3980074545
PandaTrj/Agent.AAF
YandexTrojan.Crypt!8cUKvAFDJZg
SentinelOneStatic AI – Malicious PE
MaxSecureWin.MxResIcn.Heur.Gen
FortinetMSIL/Injector.SRY!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/Trojan.7c5

How to remove Malware.AI.3980074545?

Malware.AI.3980074545 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment