How to remove “Malware.AI.4011349670”?

The Malware.AI.4011349670 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4011349670 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Malware.AI.4011349670?


File Info:
name: 67EB7ACCC9079722EE52.mlw
path: /opt/CAPEv2/storage/binaries/a55ab111bd6f958cf8e5f1eb103e5158736ca868c833aa2175b58daba79228f4
crc32: 9624BE5E
md5: 67eb7accc9079722ee52bb0951f97d8a
sha1: 80612b26f755334aecadba7d8f8e0bd19cb2427f
sha256: a55ab111bd6f958cf8e5f1eb103e5158736ca868c833aa2175b58daba79228f4
sha512: 73e57cc9c4325ecb9f4f18bf75150ee6e4051d7caba62270828a28880dcfd4a073aa7723e9e63e2ba0c274017d43d9b6d86161c9bbebdafcd7859d5d79da6c50
ssdeep: 1536:ltQJVBi29eiUjIyieTk9bXIdtdSM73eJG53G73mxdvdn3kCamMmJraZhBx9i8dBN:rHrotXIxSg32GhNvZk/8Jwh/9i8B/V
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E7C3AD663394C768E5BE0FB6A861D0A513F5ED46AB26C24F7E84334E0A73681C7507B3
sha3_384: 1b22fd31db9d2a537bb15569f72d95c7dbd2e3b0f3144a758d6fad95fc8b4ad09183d77de7fa190f6858907aaeefce4c
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-06-08 09:45:51

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: www.dans-eshop.co.uk
FileDescription: Trap Stats System
FileVersion: 1.0.0.0
InternalName: Trap Stats System.exe
LegalCopyright: Copyright ©  Betsoftware 2018
LegalTrademarks: 
OriginalFilename: Trap Stats System.exe
ProductName: Trap Stats System
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4011349670 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Razy.661873
FireEye	Gen:Variant.Razy.661873
CAT-QuickHeal	PUA.RiskwareFC.S20983050
ALYac	Gen:Variant.Razy.661873
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
K7AntiVirus	Riskware ( 00533ce41 )
Alibaba	Trojan:MSIL/FakeTool.33d9cf2e
K7GW	Riskware ( 00533ce41 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/FakeTool.AVP
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Razy.661873
Avast	Win32:Malware-gen
Tencent	Msil.Risk.Riskware.Wrqx
Ad-Aware	Gen:Variant.Razy.661873
Emsisoft	Gen:Variant.Razy.661873 (B)
Comodo	Malware@#3ni9j94mv2tw
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PLA21
McAfee-GW-Edition	GenericRXDZ-HD!67EB7ACCC907
Sophos	Generic PUA IA (PUA)
Ikarus	PUA.MSIL.Riskware
GData	Gen:Variant.Razy.661873
MAX	malware (ai score=98)
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	GenericRXDZ-HD!67EB7ACCC907
Malwarebytes	Malware.AI.4011349670
TrendMicro-HouseCall	TROJ_GEN.R002C0PLA21
Yandex	Riskware.HackTool!3VYRFZmwJxQ
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Cybereason	malicious.cc9079
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.4011349670?

Malware.AI.4011349670 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X