Malware

How to remove “Malware.AI.3986458620”?

Malware Removal

The Malware.AI.3986458620 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3986458620 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3986458620?


File Info:

name: D2FE66B6550528E63B31.mlw
path: /opt/CAPEv2/storage/binaries/22eeda939faee6cd763658db9ee8f6f8caf22ef45c91483271ff719febb5d43c
crc32: 5D695A1A
md5: d2fe66b6550528e63b3123881042d2f1
sha1: a09185cce5b4cc97b331e84e9142932fa0c19ff0
sha256: 22eeda939faee6cd763658db9ee8f6f8caf22ef45c91483271ff719febb5d43c
sha512: 5fc333db969ab5f94d7bdd4c10d0a4904cec08c402570ebb8888f8cdbd23fc1ef09c07ce422fcfe9eaa46adb150a7d213f2632ae4812ad86ba9c89ac1918856c
ssdeep: 384:QGxYnRITa5gon18v39z+kxbmLk3M2OPKXLAW4gB3WT/yVoK3h:Q/nqfS18vtykxl3HHL8w30K3h
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T112B2D056C6923FDBC111D3BA24D43E2AFA3E1451F09D0A98854F1AA013B5EA11EFFB25
sha3_384: 7346280ca991047e8fc962fcacc3bfea28cd867a232241acce5405be2b297545e533ffc8b21d2908b74db09321701f53
ep_bytes: e81900000050f30f7e0c24fc58660f7e
timestamp: 2009-02-19 05:09:11

Version Info:

0: [No Data]

Malware.AI.3986458620 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.FraudPack.tnXM
MicroWorld-eScanGen:Trojan.Downloader.bmW@a8vhU7b
FireEyeGeneric.mg.d2fe66b6550528e6
SkyhighBehavesLike.Win32.RAHack.mc
McAfeeDownloader-ASH.w.gen.d
MalwarebytesMalware.AI.3986458620
VIPREGen:Trojan.Downloader.bmW@a8vhU7b
SangforDownloader.Win32.FakeAlert.Vht0
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Trojan.Downloader.bmW@a8vhU7b
K7GWTrojan ( 000b6d771 )
K7AntiVirusTrojan ( 000b6d771 )
BitDefenderThetaAI:Packer.5E4394CB1E
VirITTrojan.Win32.Pakes.AR
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.FakeAlert.ALA
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Fraudpack-586
KasperskyTrojan.Win32.FraudPack.olr
AlibabaTrojanDownloader:Win32/FraudPack.62b260b7
NANO-AntivirusTrojan.Win32.FraudPack.bapzj
ViRobotTrojan.Win32.A.FraudPack.24576
RisingDownloader.Tibs!1.67DE (CLASSIC)
SophosMal/EncPk-FO
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Fakealert.4407
ZillyaTrojan.FraudPack.Win32.14079
TrendMicroTROJ_FAKEINIT.SM
Trapminemalicious.high.ml.score
EmsisoftGen:Trojan.Downloader.bmW@a8vhU7b (B)
IkarusTrojan-Downloader.Win32.FraudLoad
JiangminTrojan/FraudPack.bzh
WebrootW32.Rogue.Gen
VaristW32/Backdoor.FEQL-6009
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.FraudPack
Kingsoftmalware.kb.a.1000
MicrosoftRogue:Win32/Fakeinit
XcitiumTrojWare.Win32.Trojan.FraudPack.olr0@1cd43f
ArcabitTrojan.Downloader.E4A2F7
ZoneAlarmTrojan.Win32.FraudPack.olr
GDataGen:Trojan.Downloader.bmW@a8vhU7b
GoogleDetected
AhnLab-V3Trojan/Win32.FraudPack.R4565
VBA32Heur.Malware-Cryptor.MTA.10
ALYacGen:Trojan.Downloader.bmW@a8vhU7b
MAXmalware (ai score=100)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaAdware/AntivirusXPPro
TrendMicro-HouseCallTROJ_FAKEINIT.SM
TencentMalware.Win32.Gencirc.11b75e17
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.952538.susgen
FortinetW32/FraudLoad.VLM!tr.dldr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.ce5b4c
AvastWin32:Evo-gen [Trj]

How to remove Malware.AI.3986458620?

Malware.AI.3986458620 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment