How to remove “Malware.AI.4036807441”?

The Malware.AI.4036807441 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4036807441 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Malware.AI.4036807441?


File Info:
crc32: 5EE81009
md5: 21b1747de5c5c99027d8ec0e2a29fea9
name: 21B1747DE5C5C99027D8EC0E2A29FEA9.mlw
sha1: ed19f6a14044b0b873755e2249ac48537381b0a2
sha256: a919fa55d6ba43e7168615bb7543536324e215dda99a7f1c1a1d98b36078cf50
sha512: 2555c3e10564a42884ff14b5b83fa5bebe3e55d0c27a5baf3f38d7be4d3e3445973809173be620844fe72068795891e9dcaea16732ae89663bddf692bd2b6716
ssdeep: 24576:wbWLbWRbWWFm8Qxvm4R5igkb0eTzp66QI7CRMwlYJowMeWfo5m9fmCDyZzWijxI:HWAW08QnifbdTNkIeRMwlY3WTArZzWi
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Autoupdate.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Autoupdate
ProductVersion: 1.0.0.0
FileDescription: Autoupdate
OriginalFilename: Autoupdate.exe

Malware.AI.4036807441 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.989011
Sangfor	Suspicious.Win32.Bulz.821645
Cyren	W32/MSIL_CsdiMonetize.A.ge!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	UDS:Trojan.Win32.Fsysna.gen
BitDefender	Gen:Variant.Razy.989011
ViRobot	Trojan.Win32.Z.Bulz.1443328.B
MicroWorld-eScan	Gen:Variant.Razy.989011
Ad-Aware	Gen:Variant.Razy.989011
Sophos	Mal/Generic-R
TrendMicro	TROJ_GEN.R002C0PK421
McAfee-GW-Edition	GenericRXPU-FU!21B1747DE5C5
FireEye	Gen:Variant.Razy.989011
Emsisoft	Gen:Variant.Razy.989011 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.989011
AhnLab-V3	Trojan/Win.FU.C4731615
McAfee	GenericRXPU-FU!21B1747DE5C5
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.4036807441
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PK421
Ikarus	Trojan-PWS.Win32.OnLineGames
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml

How to remove Malware.AI.4036807441?

Malware.AI.4036807441 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X