Malware

Malware.AI.4004371998 removal tips

Malware Removal

The Malware.AI.4004371998 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4004371998 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4004371998?


File Info:

crc32: BF0BD9B0
md5: 87cfc875824146ee701d17d9c913c1ef
name: 87CFC875824146EE701D17D9C913C1EF.mlw
sha1: 5e999fc95ce5d5dc0fa800fef325cd93db6314a4
sha256: 7469e1414b8292f46c267489314ef3fae88cd2f5ae78c7cc4dcf7433a128c6bf
sha512: 85bbba33bcdcd5a28b0f29995360000ae81054777590e815f1d8fd9521c524ae136adf2ac58ed922be66641c4bf6155ca1a7c3d0ca0b89d13b990886c8d2fc27
ssdeep: 12288:D46JEN9ZIUdrnY01ePyV9A4dVgLgMcG9KkAnO4CX5jCCb05ju489mUScXFgE:D46s7drnYpyfdwLXcG6nzCX53b0I/Kc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4004371998 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00532e3d1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Chapak.ZZ5
CylanceUnsafe
ZillyaTrojan.Chapak.Win32.101
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaRansom:Win32/Gandcrab.0573b7a1
K7GWTrojan ( 655333331 )
Cybereasonmalicious.582414
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GDXC
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Emotet.Gen.3
NANO-AntivirusTrojan.Win32.Chapak.eyqbyu
MicroWorld-eScanTrojan.Emotet.Gen.3
TencentWin32.Trojan.Generic.Ecup
Ad-AwareTrojan.Emotet.Gen.3
SophosMal/Generic-R + Mal/GandCrab-D
ComodoTrojWare.Win32.Chapak.A@7jwiqv
BitDefenderThetaGen:NN.ZexaF.34670.OuW@a8wRmAbi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_GANDCRAB.SMD3
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
FireEyeGeneric.mg.87cfc875824146ee
EmsisoftTrojan.Emotet.Gen.3 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Chapak.k
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1117310
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Gandcrab.SF!MTB
ArcabitTrojan.Emotet.Gen.3
AegisLabAdware.Win32.Fiseria.lXzx
GDataTrojan.Emotet.Gen.3
AhnLab-V3Trojan/Win32.Magniber.R221744
Acronissuspicious
McAfeeGenericRXEF-QM!87CFC8758241
MAXmalware (ai score=97)
VBA32BScope.Trojan.Diple
MalwarebytesMalware.AI.4004371998
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_GANDCRAB.SMD3
RisingTrojan.Kryptik!8.8 (CLOUD)
YandexTrojan.GenAsa!e5XpBrktCLw
IkarusTrojan.Win32.Crypt
MaxSecureRansomeware.GandCrypt.Gen
FortinetW32/GenKryptik.DWPH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.GandCrab.HgIASOcA

How to remove Malware.AI.4004371998?

Malware.AI.4004371998 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment