Malware

Should I remove “Malware.AI.4131291726”?

Malware Removal

The Malware.AI.4131291726 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4131291726 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • A file was accessed within the Public folder.
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the EnigmaStub malware family
  • Touches a file containing cookies, possibly for information gathering
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.4131291726?


File Info:

name: 32504E943CE474498B7E.mlw
path: /opt/CAPEv2/storage/binaries/5ebd60b822508c04fb034c0f045e141c7d23feeaf282291220e2547e398e5d3d
crc32: 113D9A96
md5: 32504e943ce474498b7e92cf50e1a5ee
sha1: d0fa67e191175dbb53b5525d54a238bc6eff39df
sha256: 5ebd60b822508c04fb034c0f045e141c7d23feeaf282291220e2547e398e5d3d
sha512: 641cc61dbff6a0dfe8cf7ae0f0a8077ebde64d86b8bb5a524199695d97d7fc25db8e8302ac3ef24838a6c94297d088c83668d69fc328f93dc24de64fbc27c935
ssdeep: 49152:i+KqSFSLxaAXsAIt+vNPehIaGCacakuZcX4nglIHSUtue6Bb:i+Kex7Xs7t+vlehHacaX84gl0SCueib
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11EC533D1B1B47C28C99A5D7AAB83CE24486497D12BF1E246DFB29F0C1E490B3E5BC15C
sha3_384: 2152a8f736cdd559527f3318ababe8653a922d881e954d06b9395cf8dcbf3cd2300c3f8fb5973cdf4e05ca1f29061081
ep_bytes: eb0800ec04000000000060e800000000
timestamp: 2015-08-21 10:28:13

Version Info:

0: [No Data]

Malware.AI.4131291726 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Enigma.7!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.105700
FireEyeGeneric.mg.32504e943ce47449
SkyhighBehavesLike.Win32.Generic.vc
McAfeeArtemis!32504E943CE4
Cylanceunsafe
ZillyaTrojan.Shifu.Win32.1677
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/BankerX.a5d66e1e
K7GWTrojan ( 0058c50b1 )
K7AntiVirusTrojan ( 0058c50b1 )
BitDefenderThetaGen:NN.ZexaF.36802.DEW@a0Hv!8o
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win64/Packed.Enigma.CE
APEXMalicious
ClamAVWin.Packed.Enigma-10024665-0
KasperskyHEUR:Trojan-Banker.Win32.Shifu.pef
BitDefenderTrojan.GenericKDZ.105700
AvastWin32:BankerX-gen [Trj]
TencentWin32.Trojan-Banker.Shifu.Jajl
EmsisoftTrojan.GenericKDZ.105700 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
VIPRETrojan.GenericKDZ.105700
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.Win64.Enigma
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan[Packed]/Win64.Enigma
MicrosoftTrojan:Win32/Fareit!ml
ArcabitTrojan.Generic.D19CE4
ZoneAlarmHEUR:Trojan-Banker.Win32.Shifu.pef
GDataTrojan.GenericKDZ.105700
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Evo-gen.R639024
VBA32TrojanPSW.Tinba
ALYacTrojan.GenericKDZ.105700
MAXmalware (ai score=85)
MalwarebytesMalware.AI.4131291726
ZonerProbably Heur.ExeHeaderL
RisingTrojan.Shifu!8.48C9 (TFE:4:gnDLDi2X32Q)
SentinelOneStatic AI – Malicious PE
AVGWin32:BankerX-gen [Trj]
DeepInstinctMALICIOUS
alibabacloudVirTool:Win/Packed.EnigmaProtector.Z(dyn)

How to remove Malware.AI.4131291726?

Malware.AI.4131291726 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment