Malware

What is “Malware.AI.4227228394”?

Malware Removal

The Malware.AI.4227228394 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4227228394 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Malware.AI.4227228394?


File Info:

crc32: E5F229C0
md5: 649da478a0537a3fae7260d5e1fc6b3f
name: 649DA478A0537A3FAE7260D5E1FC6B3F.mlw
sha1: 12d771af4a8844b27358e77688ee8d1a0389a8eb
sha256: 8bda2a6676f193f8e121b7f6c05ce8e0f9b7a78193efc03a7241d4602e8bc3c3
sha512: ae62446d2a881e78d6a42a4da4bb18cae1f203f96ec15db6ed8882a7c6162f1c983e13a9ca7296e3405b1b725f52433f36f63d8382762ea27465dcc3b0ab8ce9
ssdeep: 1536:UFb9kxieoAl7sBZosc8Q0nzu49MJ9DMWqtl80MeRM6CRIBCKCcE+DMWqtlD:ubA9+hpQ0nafJZel8aRM6RBDnjelD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4227228394 also known as:

BkavW32.Common.185FF5CC
Elasticmalicious (high confidence)
DrWebTrojan.Winlock.9260
CynetMalicious (score: 100)
ALYacGen:Variant.Fugrafa.87594
MalwarebytesMalware.AI.4227228394
ZillyaTrojan.Yakes.Win32.16557
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaVirTool:Win32/Obfuscator.cd3359ca
Cybereasonmalicious.8a0537
CyrenW32/Trojan.CLTX-3206
SymantecTrojan.Ransomlock.Q
ESET-NOD32a variant of Win32/Kryptik.BGCH
APEXMalicious
AvastWin32:LockScreen-ACJ [Trj]
ClamAVWin.Ransomware.Urausy-9756801-0
KasperskyHEUR:Trojan-Ransom.Win32.Foreign.vho
BitDefenderGen:Variant.Fugrafa.87594
NANO-AntivirusTrojan.Win32.Yakes.dfelhe
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
MicroWorld-eScanGen:Variant.Fugrafa.87594
TencentMalware.Win32.Gencirc.116b0388
Ad-AwareGen:Variant.Fugrafa.87594
SophosMal/Generic-R + Troj/Ransom-ZN
ComodoTrojWare.Win32.Kryptik.BGCF@55y1jn
BitDefenderThetaGen:NN.ZexaF.34670.guX@aS7oGZii
VIPRETrojan.Win32.FakeAV.oyd (v)
TrendMicroTROJ_SPNR.15IA13
McAfee-GW-EditionBehavesLike.Win32.Multiplug.cc
FireEyeGeneric.mg.649da478a0537a3f
EmsisoftGen:Variant.Fugrafa.87594 (B)
JiangminTrojan/Yakes.lax
WebrootW32.Rogue.Gen
AviraTR/Crypt.XPACK.Gen8
eGambitUnsafe.AI_Score_93%
MicrosoftRansom:Win32/Urausy.E
ArcabitTrojan.Fugrafa.D1562A
AegisLabTrojan.Win32.Generic.4!c
ZoneAlarmHEUR:Trojan-Ransom.Win32.Foreign.vho
GDataGen:Variant.Fugrafa.87594
TACHYONTrojan/W32.Foreign.110592.AG
AhnLab-V3Trojan/Win32.Foreign.C174789
Acronissuspicious
McAfeeArtemis!649DA478A053
MAXmalware (ai score=100)
VBA32BScope.Malware-Cryptor.Hlux
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_SPNR.15IA13
RisingRansom.Urausy!8.2B7 (CLOUD)
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.BGCH!tr
AVGWin32:LockScreen-ACJ [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.PornoBlocker.HwkAEpsA

How to remove Malware.AI.4227228394?

Malware.AI.4227228394 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment