Malware

How to remove “Malware.AI.3986833660”?

Malware Removal

The Malware.AI.3986833660 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3986833660 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3986833660?


File Info:

name: 54038F54CD66FECA346D.mlw
path: /opt/CAPEv2/storage/binaries/d533f9536f1e9e98fde049c3db3ee0ac88fe26b0c44db0fb1e7ae90b7493ccfc
crc32: D0860FC7
md5: 54038f54cd66feca346ddfc35f5595a6
sha1: 4a42dde670d003f51e91afdb909afa86e31c3cea
sha256: d533f9536f1e9e98fde049c3db3ee0ac88fe26b0c44db0fb1e7ae90b7493ccfc
sha512: 7c57c35b179863ed13e2ad71d14567ade6623c5b600ee7eda0e4e5a387ed50d5f83219b55f69b0e2f959d94badb54519d30e276b39d551750a6acc4ba3472170
ssdeep: 96:Zr4VbESMnPWEpJzH1nKyG464Z1D39p0WqTzejweTe/R2Zzmnb6aa:F4VbbMn3jVnK/47572ywLRK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T156E1EB3D6FCA16B7E377CAB2C6F249CBFA65B0123912494E50C607444C23B86BD9570E
sha3_384: cf7b1be8d455bcc2b743b0c3c6cb5182aa755ac7c3b1f0c4efd1a97720fe089e62e188a13ffa5ddd4fcc98c0629a2cac
ep_bytes: 8bec81c4f4feffffe8000000005b6681
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.3986833660 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad3.33795
MicroWorld-eScanTrojan.Ppatre.Gen.1
SkyhighBehavesLike.Win32.Downloader.zt
McAfeeGenericATG-FABE!54038F54CD66
MalwarebytesMalware.AI.3986833660
VIPRETrojan.Ppatre.Gen.1
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0049c7b11 )
BitDefenderTrojan.Ppatre.Gen.1
K7GWTrojan-Downloader ( 0049c7b11 )
Cybereasonmalicious.670d00
BitDefenderThetaAI:Packer.3828A9041E
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/TrojanDownloader.Tiny.NKP
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.Upatre.gen
NANO-AntivirusTrojan.Win32.Upatre.denomc
RisingDownloader.Waski!1.E076 (CLASSIC)
SophosMal/Upatre-AS
F-SecureTrojan.TR/Dropper.Gen
ZillyaDownloader.Tiny.Win32.26411
TrendMicroTROJ_UPATRE.SM37
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.54038f54cd66feca
EmsisoftTrojan.Ppatre.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDropper.Dapato.aduh
GoogleDetected
AviraTR/Dropper.Gen
MAXmalware (ai score=83)
Antiy-AVLTrojan[Downloader]/Win32.AGeneric
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win32/Upatre.MA!MTB
ArcabitTrojan.Ppatre.Gen.1
ZoneAlarmHEUR:Trojan-Downloader.Win32.Upatre.gen
GDataTrojan.Ppatre.Gen.1
VaristW32/Tiny.L.gen!Eldorado
AhnLab-V3Trojan/Win.Gen
Acronissuspicious
VBA32BScope.TrojanDownloader.Upatre
ALYacTrojan.Ppatre.Gen.1
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
TencentTrojan-Dropper.Win32.Dapato.ka
YandexTrojan.DL.Tiny!O2eupZaMoQE
IkarusTrojan-Downloader.Win32.Tiny
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.C!tr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.3986833660?

Malware.AI.3986833660 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment