Malware

Malware.AI.4074192467 removal instruction

Malware Removal

The Malware.AI.4074192467 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4074192467 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Checks the version of Bios, possibly for anti-virtualization
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Deletes executed files from disk
  • Collects information to fingerprint the system

How to determine Malware.AI.4074192467?


File Info:

name: EB18D43C5B57624B64DC.mlw
path: /opt/CAPEv2/storage/binaries/45cbda0e8da305d085f33bd6bc48ef8cc173dbaa2fec714e625d4cd012d18bd3
crc32: 5A27DC2B
md5: eb18d43c5b57624b64dc4caeae837f58
sha1: bb5b9664d8f04f2a76958170068377485fdeb867
sha256: 45cbda0e8da305d085f33bd6bc48ef8cc173dbaa2fec714e625d4cd012d18bd3
sha512: 377dbe2f05571286a0019c205437684a33439af016f911481ebfab014bb69c333b7ca7e6b34f690eef5b0dea60daf3bdbc4494c1f5ca24ad0bd4e06c4d10c7e4
ssdeep: 6144:cWbSCNtvl8RXDJNmLHpUbTmPVrazE85ECSMjWi1:cWVNtvlGXWLSOrs67mn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13E54D090BFA0D4B5C2932030CF16D7B699207E3565F0E46776D22E6B3935462CA36B2F
sha3_384: 3a0228cf2f3e5a11771139645dbf73521d5a34b030b8c083c7fb20a064e95884f524d0223ed24c1beb42ff4ec4ac5214
ep_bytes: 558bec6aff68e871440068306c440064
timestamp: 2008-12-02 18:59:34

Version Info:

0: [No Data]

Malware.AI.4074192467 also known as:

LionicTrojan.Win32.Zbot.lEcN
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader6.24054
MicroWorld-eScanTrojan.Generic.5211923
FireEyeGeneric.mg.eb18d43c5b57624b
McAfeeGenericRXPH-EM!EB18D43C5B57
CylanceUnsafe
ZillyaTrojan.Pirminay.Win32.72
K7AntiVirusTrojan-Downloader ( 0055e3da1 )
K7GWTrojan-Downloader ( 0055e3da1 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZexaF.34698.sqW@aa9sX7cj
VirITTrojan.Win32.Generic.YCM
tehtrisGeneric.Malware
ESET-NOD32Win32/TrojanDownloader.Agent.PXO
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Pirminay-655
KasperskyTrojan.Win32.Pirminay.ayvt
BitDefenderTrojan.Generic.5211923
NANO-AntivirusTrojan.Win32.Crypted.cvplaw
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.114b957e
Ad-AwareTrojan.Generic.5211923
SophosML/PE-A + Mal/Ponmocup-A
VIPRETrojan.Generic.5211923
McAfee-GW-EditionGenericRXPH-EM!EB18D43C5B57
Trapminemalicious.high.ml.score
EmsisoftTrojan.Generic.5211923 (B)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Generic.5211923
JiangminTrojan/Pirminay.c
GoogleDetected
AviraTR/Crypt.XPACK.Gen3
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASMalwS.3303
ArcabitTrojan.Generic.D4F8713
ViRobotTrojan.Win32.A.Pirminay.291328
ZoneAlarmTrojan.Win32.Pirminay.ayvt
MicrosoftTrojan:Win32/Vundo
CynetMalicious (score: 100)
VBA32BScope.Trojan.Virtumod
ALYacTrojan.Generic.5211923
MalwarebytesMalware.AI.4074192467
RisingMalware.Undefined!8.C (TFE:5:Vkx4lBO3fpG)
IkarusTrojan-Downloader.Win32.Ponmocup
FortinetW32/Kryptik.ANL!tr
AVGWin32:Malware-gen
Cybereasonmalicious.c5b576
PandaTrj/CI.A

How to remove Malware.AI.4074192467?

Malware.AI.4074192467 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment