Malware

Malware.AI.3982638225 removal tips

Malware Removal

The Malware.AI.3982638225 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3982638225 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial language used in binary resources: Russian

How to determine Malware.AI.3982638225?


File Info:

crc32: CC21ADC5
md5: d56129009d81efb6bfd37a67972d8e17
name: D56129009D81EFB6BFD37A67972D8E17.mlw
sha1: 35004e3ca68fa470ee70ec2e9ff5a4c98ba75057
sha256: 1df21afe26a73ffb79b739d970b4198cee883bc597ceec2bcb80cff55cc4785c
sha512: f54b6452d5ee239ac22d15a564356caa0cd616555b4f3bb866c091bb263343fd874b440538c871e56cc06e31db4eddd6a8ccdd113a7fdcec1248d699db13f820
ssdeep: 24576:ZrB+rFeRn3AvC7Oj+l4wW8YDXm5LWZMkY8Avrb2vcO4z1Pq3eAvI:ZF+Bep3A2i8W/ATyvcO4z1Pq3eAQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: HelpLibAgent.exe
FileVersion: 1.0.30319.1 built by: RTMRel
CompanyName: Microsoft Corporation
ProductName: Microsoft Help Viewer
ProductVersion: 1.0.30319.1
FileDescription: HelpLibAgent.exe
OriginalFilename: HelpLibAgent.exe
Translation: 0x0409 0x04b0

Malware.AI.3982638225 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00537eb21 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGen:Variant.Application.Fugrafa.5
CylanceUnsafe
SangforTrojan.Win32.Katusha.gen
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 005376c71 )
Cybereasonmalicious.09d81e
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GHIW
APEXMalicious
AvastWin32:ICLoader-V [Adw]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Application.Fugrafa.5
NANO-AntivirusTrojan.Win32.Kryptik.fdkklo
MicroWorld-eScanGen:Variant.Application.Fugrafa.5
TencentMalware.Win32.Gencirc.10b3ebca
Ad-AwareGen:Variant.Application.Fugrafa.5
SophosMal/Generic-S
ComodoApplication.Win32.ICLoader.B@8hjrzn
BitDefenderThetaGen:NN.ZexaF.34266.Rs0@aiwWrrBQ
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.vh
FireEyeGeneric.mg.d56129009d81efb6
EmsisoftGen:Variant.Application.Fugrafa.5 (B)
SentinelOneStatic AI – Malicious PE
AviraADWARE/ICLoader.Gen7
Antiy-AVLTrojan/Generic.ASMalwS.267C39D
MicrosoftTrojan:Win32/Tiggre!rfn
GDataWin32.Application.ICLoader.F
AhnLab-V3PUP/Win32.ICLoader.C2552969
Acronissuspicious
McAfeePacked-VJ!D56129009D81
MAXmalware (ai score=97)
VBA32BScope.Trojan.Ekstak
MalwarebytesMalware.AI.3982638225
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:ICLoader-V [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.3982638225?

Malware.AI.3982638225 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment