Should I remove “Malware.AI.3993939167”?

The Malware.AI.3993939167 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3993939167 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.3993939167?


File Info:
name: 08D8E17C64A72D549B13.mlw
path: /opt/CAPEv2/storage/binaries/1714643831d83d95e81c7e5e70a5c58b7ddd921ff6ca9efa6c7576e5f5d38900
crc32: ECCE214E
md5: 08d8e17c64a72d549b13ae438110e6b5
sha1: d32ec8c6d2fa2b992813f84f301848342c14e085
sha256: 1714643831d83d95e81c7e5e70a5c58b7ddd921ff6ca9efa6c7576e5f5d38900
sha512: d711f5443feeaefe04b5ed3217e21ae9cfbb9357d402c058add254571140a46135628e1e1bb372ad9694960ccb071e3c279881f6f2d5d2abbfcf0c905a5e2016
ssdeep: 768:zJD8JacoyuDigVKE2/naf9Px6ENUkB5QVX9UK/FmQxNb4wMc4Tiif:zm/KVKJaqVXwQctiC
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1BBC36C2E360871FBA0F8862C800D7B1AF060A653B5635D1971C6CA56CAA55F77FC732E
sha3_384: 9fe92f1c5869af26828b2cee0c7a92919eaee6fa2fae89114b958874a728540c84cfcc1841cf2f5dd49ee8c24a9aa6ed
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-11-29 03:01:27

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: ConsoleApplication1
FileVersion: 1.0.0.0
InternalName: ConsoleApplication1.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: ConsoleApplication1.exe
ProductName: ConsoleApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3993939167 also known as:

Lionic	Trojan.MSIL.Bladabindi.m!c
MicroWorld-eScan	Gen:Variant.Johnnie.189492
FireEye	Gen:Variant.Johnnie.189492
McAfee	Artemis!08D8E17C64A7
Cylance	Unsafe
K7AntiVirus	Trojan ( 0057630a1 )
Alibaba	Backdoor:MSIL/Bladabindi.9c001563
K7GW	Trojan ( 0057630a1 )
Cybereason	malicious.c64a72
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.ZHJ
APEX	Malicious
Avast	Win64:Trojan-gen
ClamAV	Win.Trojan.Ursu-7595005-0
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
BitDefender	Gen:Variant.Johnnie.189492
Ad-Aware	Gen:Variant.Johnnie.189492
Emsisoft	Gen:Variant.Johnnie.189492 (B)
DrWeb	Trojan.MulDrop19.8840
TrendMicro	TROJ_GEN.R03BC0WLA21
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Paloalto	generic.ml
Avira	HEUR/AGEN.1144808
Gridinsoft	Ransom.Win64.Bladabindi.sa
GData	Gen:Variant.Johnnie.189492
Cynet	Malicious (score: 99)
MAX	malware (ai score=81)
VBA32	Backdoor.MSIL.Bladabindi
Malwarebytes	Malware.AI.3993939167
TrendMicro-HouseCall	TROJ_GEN.R03BC0WLA21
Tencent	Msil.Backdoor.Bladabindi.Hzc
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Kryptik.ZHJ!tr
AVG	Win64:Trojan-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Malware.AI.3993939167?

Malware.AI.3993939167 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X