Malware

What is “Malware.AI.3992797019”?

Malware Removal

The Malware.AI.3992797019 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3992797019 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Harvests credentials from local FTP client softwares
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3992797019?


File Info:

name: 79BE1344C49D4EAA88BC.mlw
path: /opt/CAPEv2/storage/binaries/9651ca40e099096272cdaa200c75ede38ca925f33f4dae8a918b3454ce83a86d
crc32: 264577A6
md5: 79be1344c49d4eaa88bccbf278c53ea2
sha1: a561c2b4d6bc115e5b162f55b4ef04dca62d9bf6
sha256: 9651ca40e099096272cdaa200c75ede38ca925f33f4dae8a918b3454ce83a86d
sha512: f93e7d4a2321a0e3887d9548d71fae86fa371379e61b697b105a6e7d197c85b41b722101c8754f5a271a5fb134f3950b7691a217cd8cd86c237b1f89c7755cd5
ssdeep: 98304:m5aFoxmLrJsg6OVhPpcVDgr8UTlTRmaSf:m5aFoQrkOV4Mr8GUf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T174F533227F289076CA9334711E14E336159AFE191B0918CB6BD83F0B7D356E2DA7E1C9
sha3_384: ee9874aa132b8b0cd24fbf58c8e5cb49a4abcef79ac815ce15608bd2989fe6acb901d2c607f40171955488a8093f976a
ep_bytes: 558bec6aff6880fa410068f0c4410064
timestamp: 2016-04-02 22:14:34

Version Info:

0: [No Data]

Malware.AI.3992797019 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
ClamAVRevoked.CRT.HookSignTool-9999979-0
Cylanceunsafe
Cybereasonmalicious.4d6bc1
APEXMalicious
CynetMalicious (score: 100)
F-SecureHeuristic.HEUR/AGEN.1320309
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
Trapminemalicious.high.ml.score
WebrootPua.Opencandy
AviraHEUR/AGEN.1320309
MicrosoftRansom:Win32/CVE
GoogleDetected
McAfeeArtemis!79BE1344C49D
MalwarebytesMalware.AI.3992797019
IkarusRansom.Win32
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_60% (D)

How to remove Malware.AI.3992797019?

Malware.AI.3992797019 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment