Malware

Malware.AI.4091422652 removal instruction

Malware Removal

The Malware.AI.4091422652 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4091422652 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.4091422652?


File Info:

name: 911367D89D695CAC1C44.mlw
path: /opt/CAPEv2/storage/binaries/61331c745342e04a0e3631cc5d008fb7c80611fe3631b90ff85b1643be54d882
crc32: FD02F45C
md5: 911367d89d695cac1c44a72ab8a1def8
sha1: 97a3078e0b9029709d595365d9d0fc012a315b40
sha256: 61331c745342e04a0e3631cc5d008fb7c80611fe3631b90ff85b1643be54d882
sha512: c963c88c2b2674854c56fa167ddfefbf92ae7957e906c9f0d75947569c3a708bd60547d8ded824ef2b4d0d47ac913de44dcc632f59bfb3fccc470f2eb3ce095f
ssdeep: 6144:lPJQtH+0d1Ii+gDv7VNyFzDv+ikTAEoNToSWDD0:l+tH+e1thQFzjJQ2oSoD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FE44F1C2F748DE29C4A6427298574FB01F75EC265AD24F03A794BAAE3C367207F07616
sha3_384: 3d41fac5ec3791467f44f940c3f300695ea5d54b438635877517a8bd59b8a0a47b4deb8b989a9198b5ff32c9f259cd23
ep_bytes: 60be00f045008dbe0020faff5789e58d
timestamp: 2007-05-20 16:36:31

Version Info:

Comments: Manages mounted image files of any type.
CompanyName: Towodo Software
FileDescription: Virtual Drive Manager
FileVersion: 1.3.1
InternalName: Virtual Drive Manager.exe
LegalCopyright: Copyright © 2007
OriginalFilename: Virtual Drive Manager.exe
ProductName: Virtual Drive Manager
ProductVersion: 1.3.1
Translation: 0x0804 0x03a8

Malware.AI.4091422652 also known as:

LionicTrojan.Win32.Generic.m8Nx
CAT-QuickHealW32.Patched.PF5
CylanceUnsafe
ZillyaTrojan.Patched.Win32.80163
AlibabaTrojan:Win32/Generic.87ae7d09
CyrenW32/Risk.ZAZH-0121
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTrojan.Win32.DARKSHELL.AA
Paloaltogeneric.ml
KasperskyTrojan.Win32.Patched.pf
NANO-AntivirusVirus.Win32.Gen.ccmw
APEXMalicious
DrWebTrojan.Siggen7.7018
TrendMicroTrojan.Win32.DARKSHELL.AA
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S + Mal/Generic-L
IkarusTrojan.Win32.Patched
WebrootW32.Trojan.dx!vla
MAXmalware (ai score=99)
MicrosoftTrojan:Win32/Occamy.C61
ZoneAlarmTrojan.Win32.Patched.pf
GoogleDetected
McAfeeArtemis!911367D89D69
VBA32Trojan.Patched
MalwarebytesMalware.AI.4091422652
AvastFileRepMalware [Trj]
RisingTrojan.Patched!8.B7 (CLOUD)
YandexTrojan.Agent!/cHkI9ceW9k
SentinelOneStatic AI – Suspicious PE
FortinetW32/Patched.PF!tr
AVGFileRepMalware [Trj]

How to remove Malware.AI.4091422652?

Malware.AI.4091422652 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment