Should I remove “Malware.AI.3997359427”?

The Malware.AI.3997359427 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3997359427 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Malware.AI.3997359427?


File Info:
name: 58580B1DD5B85462C62C.mlw
path: /opt/CAPEv2/storage/binaries/d7b046e23cfc21e3be4fda50d64c4eb5f8d83889f50bfe9ed97e6580e704f2f9
crc32: 55F6DFF3
md5: 58580b1dd5b85462c62c2e3caea78232
sha1: b9b3de5de718220b18ec49a45d35561ad778f3b8
sha256: d7b046e23cfc21e3be4fda50d64c4eb5f8d83889f50bfe9ed97e6580e704f2f9
sha512: eff7ccbb88c98d189820a2e4cf608ce6910bd1c675565b70c08656c0d39035e7106a9b5557601738aa6cdb2cdcd720584d4e6f729bf31d6d9e5d066ff326fd4f
ssdeep: 3072:ZtPPJqDFLdSzPdujvZPgmbKCDhOyINx+ZymxleMMDZOyINxVJho9cXxjUF3J4lQC:XPGLgzPduT/BS6r+zLXKvC7+BDQq6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T129646F2C73F80E04F2FB8E3A99B61144997BBC8A7D21C96D0895161E1D76F40DC66F2B
sha3_384: 2545e0ffdbfa58a03b94a42763ccb1e207839705973f37a65b397a9daa8f526206ed53b9682579e879a1e3c6c3c7926a
ep_bytes: ff25002040003a003b007c0000000000
timestamp: 2021-08-18 22:05:58

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Ev3resFlexer
FileVersion: 1.0.0.0
InternalName: Ev3resFlexer.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Ev3resFlexer.exe
ProductName: Ev3resFlexer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3997359427 also known as:

Lionic	Trojan.Win32.Zilla.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.8876
FireEye	IL:Trojan.MSILZilla.8876
ALYac	IL:Trojan.MSILZilla.8876
K7AntiVirus	Hacktool ( 005887011 )
Alibaba	Trojan:MSIL/Generic.6f05cb99
K7GW	Hacktool ( 005887011 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/HackTool.BruteForce.AKC
APEX	Malicious
Kaspersky	VHO:HackTool.MSIL.Convagent.gen
BitDefender	IL:Trojan.MSILZilla.8876
Avast	Win32:TrojanX-gen [Trj]
Tencent	Msil.Trojan.Msilzilla.Svrk
Ad-Aware	IL:Trojan.MSILZilla.8876
McAfee-GW-Edition	GenericRXQV-PG!58580B1DD5B8
Emsisoft	IL:Trojan.MSILZilla.8876 (B)
GData	IL:Trojan.MSILZilla.8876
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.PG.C4796655
McAfee	GenericRXQV-PG!58580B1DD5B8
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3997359427
TrendMicro-HouseCall	TROJ_GEN.R002H09KP21
Yandex	Riskware.BruteForce!PmkcM4TnmOA
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]

How to remove Malware.AI.3997359427?

Malware.AI.3997359427 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X