Malware

How to remove “Malware.AI.4130456001”?

Malware Removal

The Malware.AI.4130456001 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4130456001 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the shellcode patterns malware family
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.4130456001?


File Info:

name: 554EAA018FE4722E26BB.mlw
path: /opt/CAPEv2/storage/binaries/3daec2c8b6b1871c842499e95631be488a15404418ee31552bd84166bbe18167
crc32: D6AD759A
md5: 554eaa018fe4722e26bbe54ea7d2cd10
sha1: ae633cb30c88d460d4be8074edca6051d7387e96
sha256: 3daec2c8b6b1871c842499e95631be488a15404418ee31552bd84166bbe18167
sha512: e11f502310810990a4f11b9de01a1a711e56351cf731350a84f401ba545de048652e6b73879d03c2198759ec3f632256468831f645c3f733b40733f44912bf58
ssdeep: 12288:jhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4agoXTyq6jZjijZ1ttFOEV:pRmJkcoQricOIQxiZY1iaPDyqQAdl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B15BF2EB5C6803EC1A2E2B3DE7AF37596386D263326C1D727C439215E7C1416B2D762
sha3_384: df92ce4470de7f6f223b4e176f1ba506230facac91d873bb80c0c79c91d0d4f7546552ff26c32fccd6cd40f0bf38b529
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Malware.AI.4130456001 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Autoit.i!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.71531179
FireEyeGeneric.mg.554eaa018fe4722e
CAT-QuickHealTrojanpws.Msil
SkyhighBehavesLike.Win32.Ransomware.ch
ALYacTrojan.GenericKD.71531179
Cylanceunsafe
SangforInfostealer.Win32.Autoit.V66p
K7AntiVirusTrojan ( 700000111 )
AlibabaTrojanPSW:MSIL/Agensla.06173e42
K7GWTrojan ( 700000111 )
Cybereasonmalicious.30c88d
VirITTrojan.Win32.Genus.VCP
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Injector.Autoit.FTJ
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-PSW.MSIL.Agensla.wtw
BitDefenderTrojan.GenericKD.71531179
AvastWin32:Malware-gen
TencentMsil.Trojan-QQPass.QQRob.Qgil
EmsisoftTrojan.GenericKD.71531179 (B)
F-SecureTrojan.TR/AD.GenSteal.sijgc
DrWebTrojan.Inject5.2275
VIPRETrojan.GenericKD.71531179
SophosTroj/AutoIt-DGF
IkarusTrojan.Win32.Injector
GDataTrojan.GenericKD.71531179
AviraTR/AD.GenSteal.sijgc
KingsoftWin32.PSWTroj.Undef.a
XcitiumMalware@#3lgz0rnr0a5oc
ArcabitTrojan.Generic.D4437AAB
ZoneAlarmTrojan-PSW.MSIL.Agensla.wtw
MicrosoftHackTool:Win64/Mimikatz.A
VaristW32/ABRisk.VIUI-1331
AhnLab-V3Trojan/Win.PWS.C5585550
McAfeeRDN/Generic PWS.y
MAXmalware (ai score=82)
VBA32Trojan.Autoit.F
MalwarebytesMalware.AI.4130456001
TrendMicro-HouseCallTROJ_GEN.F0D1C00B524
SentinelOneStatic AI – Suspicious PE
FortinetAutoIt/Injector.FRY!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.4130456001?

Malware.AI.4130456001 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment