Malware

Should I remove “Malware.AI.4054130244”?

Malware Removal

The Malware.AI.4054130244 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4054130244 virus can do?

  • Unconventionial binary language: Arabic (Syria)
  • Unconventionial language used in binary resources: Turkish
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Malware.AI.4054130244?


File Info:

crc32: 92C95AF6
md5: aaf7ed880cd5bd7242018a4d7298f776
name: AAF7ED880CD5BD7242018A4D7298F776.mlw
sha1: cd593d22d9b03e2f5cc8bc9be4e9d9d0a3f26a0e
sha256: 6b845d76d9212db8d14a97acea28af84e63936aefcc3c0bae4204ccc7e00db84
sha512: f6c69f565818b08c5e4278da45f78e09bc1670207210747a79b68b55c72b38a33fef30d97daa6ad4f2511b673e81a826e0eea39d29acad59672657e876f6b4a1
ssdeep: 1536:C2f06TPagdpkXjcNY+hsWjcdHtyovxkL/YQHopVKzoXqGRX/MxOYbKLYiuKrr2:k62gvVDOHADL9amo7vKtbKYBA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: MicroWare Considine PLC (c) 1998 - 2017
ProductVersion: 7.5.9.3
FileDescription: MicroWare Considine PLC
FileVersion: 7.5.9.3
CompanyName: MicroWare Considine PLC
Translation: 0x2801 0x04b0

Malware.AI.4054130244 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00508b8f1 )
DrWebTrojan.Encoder.10477
CynetMalicious (score: 100)
ALYacGen:Variant.Ransom.CryptoMix.3
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 00508b8f1 )
Cybereasonmalicious.80cd5b
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.YGW
APEXMalicious
AvastFileRepMalware
KasperskyTrojan.Win32.Reconyc.inea
BitDefenderGen:Variant.Ransom.CryptoMix.3
NANO-AntivirusTrojan.Win32.Reconyc.faxiyk
MicroWorld-eScanGen:Variant.Ransom.CryptoMix.3
TencentWin32.Trojan.Reconyc.Lqyp
Ad-AwareGen:Variant.Ransom.CryptoMix.3
SophosML/PE-A + Troj/CrShield-B
ComodoMalware@#1aenwdgh5ky6x
BitDefenderThetaGen:NN.ZexaF.34684.hq0@aiHX!raO
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CRYPAURA.SMRV
McAfee-GW-EditionGenericR-KZX!AAF7ED880CD5
FireEyeGeneric.mg.aaf7ed880cd5bd72
EmsisoftGen:Variant.Ransom.CryptoMix.3 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Malware.Gen
AviraTR/Crypt.XPACK.Gen7
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Skeeyah.A!rfn
AegisLabTrojan.Multi.Generic.4!c
GDataGen:Variant.Ransom.CryptoMix.3
AhnLab-V3Trojan/Win32.Reconyc.C1861304
McAfeeGenericR-KZX!AAF7ED880CD5
MAXmalware (ai score=100)
VBA32Trojan.Reconyc
MalwarebytesMalware.AI.4054130244
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CRYPAURA.SMRV
RisingTrojan.Kryptik!8.8 (CLOUD)
YandexTrojan.Reconyc!govgfW+rnAs
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.FPVS!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Malware.AI.4054130244?

Malware.AI.4054130244 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment