Malware

About “Malware.AI.4011044005” infection

Malware Removal

The Malware.AI.4011044005 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4011044005 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4011044005?


File Info:

name: 853DB01FA9000604A1A3.mlw
path: /opt/CAPEv2/storage/binaries/e123f0d1d5c540d4b4f2c43d2bbf6bd82b451a9dc46bbccea3ec79c2c74b3028
crc32: F0715166
md5: 853db01fa9000604a1a316c468021d8e
sha1: ee2e72d7481b8bc9ca50d288a5c6fcd2106acbe7
sha256: e123f0d1d5c540d4b4f2c43d2bbf6bd82b451a9dc46bbccea3ec79c2c74b3028
sha512: ed3dd3e10be23915eadec999eb2b732bbc1ccb8c88b7ad2b1a68664315340d10467a482a340ccf25f3f0162fc886278f17801cb8336e07be32d3d211c107945b
ssdeep: 384:CR7Pjs5A5vocWgVakVYf/xhM5dmcFGkYP9emFG+cGfkUE9lfO1mfk08AIal:CRjscvom2Zab0kYP4mbrfxSZOYfRvB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T147E2F913E654D096F161CAB14CBAAAAA58273C361900CF0B794D7FAC2C725C3DAF471B
sha3_384: 516099476649125d78e46505aa56dd8d02e455a0eb08e274a753ca348574a4970779f287dbedb604d498d716653494f3
ep_bytes: 68781c4000e8f0ffffff000000000000
timestamp: 2020-09-12 03:24:44

Version Info:

Translation: 0x0804 0x04b0
CompanyName: StoneTechnology
ProductName: CrazyError
FileVersion: 0.00
ProductVersion: 0.00
InternalName: setup
OriginalFilename: setup.exe

Malware.AI.4011044005 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Lazy.4!c
MicroWorld-eScanGen:Variant.Lazy.248805
FireEyeGen:Variant.Lazy.248805
McAfeeArtemis!853DB01FA900
CylanceUnsafe
VIPREGen:Variant.Lazy.248805
SangforTrojan.Win32.Badjoke.V2mb
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/BadJoke.aa13e2d4
K7GWTrojan ( 005991151 )
K7AntiVirusTrojan ( 005991151 )
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/BadJoke.LD
APEXMalicious
BitDefenderGen:Variant.Lazy.248805
AvastWin32:Trojan-gen
TencentWin32.Trojan.Badjoke.Nsmw
Ad-AwareGen:Variant.Lazy.248805
ZillyaTool.LD.Win32.2
TrendMicroTROJ_GEN.R002C0PKK22
McAfee-GW-EditionRDN/Generic.com
EmsisoftGen:Variant.Lazy.248805 (B)
GDataGen:Variant.Lazy.248805
GoogleDetected
AviraTR/BadJoke.hvbra
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.BadJoke
ArcabitTrojan.Lazy.D3CBE5
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.62310952
MalwarebytesMalware.AI.4011044005
TrendMicro-HouseCallTROJ_GEN.R002C0PKK22
RisingTrojan.BadJoke!8.EDE4 (CLOUD)
IkarusTrojan.VB.Crypt
MaxSecureTrojan.Malware.191446706.susgen
AVGWin32:Trojan-gen
PandaTrj/Chgt.AD

How to remove Malware.AI.4011044005?

Malware.AI.4011044005 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment