Malware

Malware.AI.4132638764 removal guide

Malware Removal

The Malware.AI.4132638764 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4132638764 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Attempts to remove evidence of file being downloaded from the Internet
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Attempts to interact with an Alternate Data Stream (ADS)
  • Appends a known CryptoMix ransomware file extension to files that have been encrypted
  • Anomalous binary characteristics

How to determine Malware.AI.4132638764?


File Info:

crc32: A7CF7E6A
md5: a3768625cf12f26a2d0887ce12204de1
name: A3768625CF12F26A2D0887CE12204DE1.mlw
sha1: 734ccf971b77468b6329f8489ad279619194b97c
sha256: 6323c026c4e16fa4364f7100bbfbd8a96dc56aa89ee1700f9f0bf2cb7207f895
sha512: cbbc44a8c1c263602b91b696750549a414916a9a1202560ebaccbe70ed311ccc05a54a2f8ccc8a8404c17d80570b6c7004f449cef72124c52c33eb76fad236c2
ssdeep: 1536:pBOMJyHi5yOPxI+KLUCTb+qIkq1y+W9237j56T3cOGN:piUI/LUCTiqmyY7IQH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2004 - 2016
InternalName: Microsoft Decodes Ransomwares
FileVersion: 5, 3, 3, 6
ProductName: Microsoft Decodes Ransomwares
ProductVersion: 5, 3, 3, 6
FileDescription: Microsoft Decodes Ransomwares
OriginalFilename: Microsoft Decodes Ransomwares
Translation: 0x100a 0x04e3

Malware.AI.4132638764 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0056f0eb1 )
LionicTrojan.Win32.Generic.4!c
CynetMalicious (score: 100)
CAT-QuickHealRansom.TeslaCrypt.A5
ALYacGen:Variant.Ransom.HydraCrypt.1
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/generic.ali2000010
K7GWTrojan ( 0056f0eb1 )
Cybereasonmalicious.5cf12f
CyrenW32/S-d6746146!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Ransom.HydraCrypt.1
NANO-AntivirusTrojan.Win32.GenKryptik.evfgwx
MicroWorld-eScanGen:Variant.Ransom.HydraCrypt.1
TencentWin32.Trojan.Generic.Llgw
Ad-AwareGen:Variant.Ransom.HydraCrypt.1
SophosTroj/CrShield-A
ComodoMalware@#exazv130une3
BitDefenderThetaGen:NN.ZexaF.34170.fu0@aujZESmi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CRYPHYDRA.SMVT
McAfee-GW-EditionBehavesLike.Win32.Dropper.mh
FireEyeGeneric.mg.a3768625cf12f26a
EmsisoftGen:Variant.Ransom.HydraCrypt.1 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Fury.t
AviraHEUR/AGEN.1127104
Antiy-AVLTrojan/Generic.ASMalwS.22BBE19
MicrosoftTrojan:Win32/Skeeyah.A!rfn
GDataGen:Variant.Ransom.HydraCrypt.1
AhnLab-V3Trojan/Win32.Fury.C1710207
McAfeeArtemis!A3768625CF12
MAXmalware (ai score=100)
VBA32BScope.Trojan.Scar
MalwarebytesMalware.AI.4132638764
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_CRYPHYDRA.SMVT
RisingTrojan.Generic@ML.100 (RDML:iHfFV93MpZV/nOHrQGFNaw)
YandexTrojan.Agent!xH4F7Np+OHk
IkarusTrojan.Win32.Krypt
FortinetW32/Generic.OHF!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.4132638764?

Malware.AI.4132638764 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment