Malware

Should I remove “Malware.AI.4079068136”?

Malware Removal

The Malware.AI.4079068136 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4079068136 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • Installs a browser addon or extension
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Attempts to modify browser security settings
  • Harvests information related to installed mail clients

How to determine Malware.AI.4079068136?


File Info:

crc32: B29BE0C2
md5: 0298d7086759c58686d6d29d7ccd02e3
name: 0298D7086759C58686D6D29D7CCD02E3.mlw
sha1: 5c2f430385ba0f747322b568d418ced939179d10
sha256: 525ab24d95b66564e48ba617a000205a0148cc102292dd9562d7afe1e6515def
sha512: 5da860eb23e0835629c3c267f607161c075ae7c93d5bbb51c28f5ebfca86ff3f51dbc7079933c87cef7572f7e33e980952ae1043335c3d5b795e4c3d6d52417e
ssdeep: 49152:IBFRU0DD9j7oWA6j9NYGam61xg8Uze+F9xg:InKQD9XoWVj9Nbam6qz
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: This is a Sharesoft
FileVersion: 2.0.3.1
CompanyName: This is a Sharesoft
Comments: Help you to create and decompile CHM files
ProductName: x79d2x6267x884cx542fx52a8x9879
ProductVersion: 2.0.3.1
FileDescription: Help you to create and decompile CHM files
Translation: 0x0804 0x04b0

Malware.AI.4079068136 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005246d51 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Wsgame.55201
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Generic.2919
ALYacGen:Variant.Graftor.770342
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
K7GWTrojan ( 00013a151 )
Cybereasonmalicious.86759c
CyrenW32/OnlineGames.HI.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
AvastWin32:MiscX-gen [PUP]
ClamAVWin.Malware.Deepscan-6824108-0
KasperskyBackdoor.Win32.Farfli.bwda
BitDefenderGen:Variant.Graftor.770342
MicroWorld-eScanGen:Variant.Graftor.770342
Ad-AwareGen:Variant.Graftor.770342
SophosMal/Generic-S
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderThetaGen:NN.ZexaF.34790.RnKfaSH7Xmjb
TrendMicroTROJ_GEN.R005C0WG621
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.0298d7086759c586
EmsisoftGen:Variant.Graftor.770342 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/PSW.QQPass.mmi
Antiy-AVLTrojan/Generic.ASCommon.FA
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Graftor.DBC126
GDataWin32.Trojan.PSE.19Q2126
AhnLab-V3Malware/Win.Generic.C4542056
Acronissuspicious
McAfeeArtemis!0298D7086759
MAXmalware (ai score=85)
VBA32Backdoor.Convagent
MalwarebytesMalware.AI.4079068136
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R005C0WG621
YandexTrojan.GenAsa!k10dBJpok+4
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.65CA!tr
AVGWin32:MiscX-gen [PUP]

How to remove Malware.AI.4079068136?

Malware.AI.4079068136 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment