Malware

Malware.AI.4107050870 malicious file

Malware Removal

The Malware.AI.4107050870 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4107050870 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4107050870?


File Info:

name: AD294781A7CBE0C3CCB5.mlw
path: /opt/CAPEv2/storage/binaries/692921cfb1e2662570d0c1db44f9d40c49841ecc25a40c400d51986382fc80a4
crc32: 66530C68
md5: ad294781a7cbe0c3ccb5c1fed338df13
sha1: 6e1c6207b769935cd299d5b6ad8d128149014ecc
sha256: 692921cfb1e2662570d0c1db44f9d40c49841ecc25a40c400d51986382fc80a4
sha512: ccde8e7a2a9b2701a10428a545d5b0bb34daa091cc82ae87ef4b9c648b7db0f78f9b7065ef6d436e4c9c724da63c7fe46a43fc0ea8c488f08e6fef8af9cd73e6
ssdeep: 6144:Xr9qXZpXE3POfm+jaEnaVmJP6kqgcoRXGQwAo:X0sGOnEn+mJyV22Qno
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B23412037B19FA4ADB328F3D28A796461526BD540089C6C70E392B2F2DB5E179F48768
sha3_384: df3b50e82b7958e5a723028c9d7e48c44c63e2c1c462b19c1294861c740d720cf58864ca974de522b1703c0c12b5dd86
ep_bytes: 60be001044008dbe0000fcff57eb0b90
timestamp: 2017-12-29 13:05:18

Version Info:

CompanyName: FragSoft
FileDescription: UELR v0.1.0
FileVersion: 0.1.0
InternalName: UELR
LegalCopyright: Copyright (C) ProFrager
OriginalFilename: uelr.exe
ProductName: UELR
ProductVersion: 0.1.0
Translation: 0x0409 0x04b0

Malware.AI.4107050870 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.67524723
SkyhighBehavesLike.Win32.Generic.dc
McAfeeArtemis!AD294781A7CB
MalwarebytesMalware.AI.4107050870
SangforTrojan.Win32.Agent.Vz2t
ArcabitTrojan.Generic.D4065873
BitDefenderThetaGen:NN.ZexaE.36792.omKfa8hMw@oi
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
APEXMalicious
BitDefenderTrojan.GenericKD.67524723
AvastWin32:Malware-gen
VIPRETrojan.GenericKD.67524723
Trapminemalicious.high.ml.score
FireEyeTrojan.GenericKD.67524723
EmsisoftTrojan.GenericKD.67524723 (B)
WebrootW32.Malware.Gen
Antiy-AVLTrojan/Win32.SGeneric
GDataTrojan.GenericKD.67524723
ALYacTrojan.GenericKD.67524723
MAXmalware (ai score=82)
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06IK23
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Malware.AI.4107050870?

Malware.AI.4107050870 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment