Malware

What is “Malware.AI.4196960863”?

Malware Removal

The Malware.AI.4196960863 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4196960863 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4196960863?


File Info:

name: 396F76A7BE2675E0B03E.mlw
path: /opt/CAPEv2/storage/binaries/9f7b31b28f4d20f8079b6e43d7de4505c9b83cde1d6521d11ab5c0782c09f32c
crc32: 387E800A
md5: 396f76a7be2675e0b03e69773b9fe574
sha1: 254f8fff28c082d4476f2c1234f3af00360e1600
sha256: 9f7b31b28f4d20f8079b6e43d7de4505c9b83cde1d6521d11ab5c0782c09f32c
sha512: 7daa149fd8b030a3babb701b921f416d3404366e63abd7e83b452d8c064e7ff64333cb9f26875a62b01d9a79cb1e1ff91304c630dcae90a083a763b30ab0bc84
ssdeep: 6144:0DYRP+Zkf7wXjcwNvDM40AjvOJyh0q3Dom:0DsP+ZI7wNR0AjLeqzom
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5741B63F64549F6E1D50CB8C37BE300AA9EADBF21F230066C563E0F49EE681197D526
sha3_384: c793ef13240986db09147e4ac36dd0d58e7978e3cb5c39cdc1b51581acf20f670711bd7e6b6bfa819fc31abdb285a45d
ep_bytes: 558becb9070000006a006a004975f953
timestamp: 2019-02-18 23:52:51

Version Info:

CompanyName: Disc Soft Ltd
FileDescription: DAEMON Tools Pro Fix
FileVersion: 8. 3. 0. 0
InternalName:
LegalCopyright: Copyright (C) 2005 - 2019 Disc Soft Ltd
LegalTrademarks: Disc Soft Ltd
OriginalFilename: DTProFix.exe
ProductName: DAEMON Tools Pro Fix
ProductVersion: 8.3.0.0
Comments:
Translation: 0x0409 0x04e4

Malware.AI.4196960863 also known as:

MicroWorld-eScanGen:Variant.Graftor.733577
FireEyeGeneric.mg.396f76a7be2675e0
CylanceUnsafe
SangforTrojan.Win32.Occamy.C9F
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0PJS21
Paloaltogeneric.ml
ClamAVWin.Malware.Wacatac-9819761-0
BitDefenderGen:Variant.Graftor.733577
Ad-AwareGen:Variant.Graftor.733577
EmsisoftGen:Variant.Graftor.733577 (B)
ComodoMalware@#1ycd8arkcehqn
TrendMicroTROJ_GEN.R002C0PJS21
McAfee-GW-EditionGenericRXOZ-BW!396F76A7BE26
SophosMal/Generic-S
GDataGen:Variant.Graftor.733577
WebrootW32.Trojan.Gen
Antiy-AVLTrojan/Generic.ASMalwS.2B810EF
GridinsoftRansom.Win32.Occamy.sa
MicrosoftTrojan:Win32/Occamy.C9F
AhnLab-V3Malware/Win32.Generic.C4060841
McAfeeGenericRXOZ-BW!396F76A7BE26
VBA32Trojan.MulDrop
MalwarebytesMalware.AI.4196960863
APEXMalicious
RisingTrojan.Fuerboos!8.EFC8 (CLOUD)
YandexTrojan.GenAsa!+78k5jDZ8Ms
MaxSecureTrojan.Malware.74383734.susgen
FortinetW32/Graftor.ZBYJ!tr
PandaTrj/GdSda.A

How to remove Malware.AI.4196960863?

Malware.AI.4196960863 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment