Malware

How to remove “Malware.AI.4028084875”?

Malware Removal

The Malware.AI.4028084875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4028084875 virus can do?

  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.4028084875?


File Info:

crc32: 0102A45C
md5: c80b72b5cf789780252ea4586853f285
name: C80B72B5CF789780252EA4586853F285.mlw
sha1: 11145fde2d88c334e28670f1848974d92b6195fb
sha256: 105f17e1d9e065e049bae5ad8088174609ff2959d41bb89685024a16d9a6ddec
sha512: 4d0c2c356ef9d36fc5932db5915d9ea5c29ec71ba0219fca253072cbc08a1a263e708b78ef513ab56714de017736871eed643cde26e6b468dbba19cd5bfc38f5
ssdeep: 384:XK6+yLgyFk9iSc+JbRC15DhszdfaEe+2yYNh9:66VjGNcSRyxhshy/PV
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: x7248x6743x6240x6709(C) 2001-2002x5e74 x5218x5065x82f1
InternalName: PATCH
FileVersion: 1.73
CompanyName: x77e5x8f6fx7f51
ProductName: x6587x4ef6x8865x4e01x5de5x5177
ProductVersion: 1.73
FileDescription: x6587x4ef6x8865x4e01x5de5x5177
OriginalFilename: PATCH.EXE
Translation: 0x0804 0x04b0

Malware.AI.4028084875 also known as:

K7AntiVirusUnwanted-Program ( 004d38111 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader2.25228
ClamAVWin.Trojan.Agent-411469
CAT-QuickHealTrojan.MauvaiseRI.S5243245
CylanceUnsafe
ZillyaTrojan.Agent.Win32.130325
SangforTrojan.Win32.Occamy.C
CrowdStrikewin/malicious_confidence_100% (D)
K7GWUnwanted-Program ( 004d38111 )
Cybereasonmalicious.e2d88c
CyrenW32/Trojan.GYMI-0034
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/HackTool.Patcher.BU potentially unsafe
APEXMalicious
NANO-AntivirusTrojan.Win32.Dwn.cseed
SophosMal/Generic-R + Mal/Agent-MR
ComodoMalware@#3tht9glyzad5m
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_MALPGR.A
McAfee-GW-EditionRDN/Generic PUP.z
FireEyeGeneric.mg.c80b72b5cf789780
Antiy-AVLTrojan/Generic.ASMalwS.92324
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3HackTool/Win32.Patcher.C2834615
McAfeeRDN/Generic PUP.z
MAXmalware (ai score=99)
VBA32Trojan.Downloader
MalwarebytesMalware.AI.4028084875
TrendMicro-HouseCallTROJ_MALPGR.A
YandexTrojan.GenAsa!hd9syXODDW0
IkarusTrojan-Spy.Agent
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Generic.AP.18F8D1!tr
Paloaltogeneric.ml

How to remove Malware.AI.4028084875?

Malware.AI.4028084875 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment