About “Malware.AI.4057257999” infection

The Malware.AI.4057257999 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4057257999 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Malware.AI.4057257999?


File Info:
name: D9F5224B7498AFC8B4F9.mlw
path: /opt/CAPEv2/storage/binaries/c348819d5480d0d904b8a6add75d2d36d48649dedfa3d1835d9d55574656cb07
crc32: 1CA5532D
md5: d9f5224b7498afc8b4f9c9a41a469fd9
sha1: 2519e737cf3ba36712160ed9a677581df7ba5804
sha256: c348819d5480d0d904b8a6add75d2d36d48649dedfa3d1835d9d55574656cb07
sha512: 64f8756816c4ac5295a434017ec612b117e1508639573c84736a87ddd8bbf762af80cc67e311feb78cfccfafdfbd015ba078f8a318ac54a1fb5ca096477c9712
ssdeep: 3072:YM616ogzfZAW7IY5kbAMSEoFb6XPtrNwJdp1pWN/SLEHfi2SLEHfi2SLEHfi2SLx:7zfZAuYSvFb6XVHRHRHRHRHRHaH
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T12B1539443264DF2EE46917F608E4E8B83371AC46E821D3079DC2BDDFB973BA55889613
sha3_384: 5cc30a610510450debaa6d25f7133cb2d8f1d26d65b25065794d3384f350771cd4d5bcafea0deb26db3b4f0b5a358ac4
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2101-10-24 07:05:36

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.3.0.0
InternalName: Aynx Loader.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Aynx Loader.exe
ProductName: 
ProductVersion: 1.3.0.0
Assembly Version: 1.3.0.0

Malware.AI.4057257999 also known as:

Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Bulz.498279
FireEye	Gen:Variant.Bulz.498279
McAfee	Artemis!D9F5224B7498
Cylance	Unsafe
Zillya	Tool.Agent.Win32.74109
Sangfor	Trojan.Script.Phonzy.B
K7AntiVirus	Hacktool ( 00563edb1 )
Alibaba	Trojan:MSIL/Generic.116ec1df
K7GW	Hacktool ( 00563edb1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/HackTool.Agent.NB
TrendMicro-HouseCall	TROJ_GEN.R023H09F221
BitDefender	Gen:Variant.Bulz.498279
Avast	Win64:Trojan-gen
Tencent	Win32.Trojan.Bulz.Wvkn
Ad-Aware	Gen:Variant.Bulz.498279
Emsisoft	Gen:Variant.Bulz.498279 (B)
F-Secure	Heuristic.HEUR/AGEN.1143318
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!PUP
Sophos	Mal/Generic-R
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.498279
Avira	HEUR/AGEN.1143318
MAX	malware (ai score=85)
Gridinsoft	Ransom.Win64.Wacatac.sa
Arcabit	Trojan.Bulz.D79A67
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.498279
Malwarebytes	Malware.AI.4057257999
Ikarus	Trojan-Downloader.MSIL.Agent
Fortinet	MSIL/TrojanDownloader.AGENT.GIQ!tr
AVG	Win64:Trojan-gen
MaxSecure	Trojan.Malware.118752598.susgen

How to remove Malware.AI.4057257999?

Malware.AI.4057257999 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X