Malware

Malware.AI.4153174340 removal guide

Malware Removal

The Malware.AI.4153174340 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4153174340 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Malware.AI.4153174340?


File Info:

crc32: 2231AA0F
md5: 600aceaddb22b9a1d6ae374ba7fc28c5
name: 600ACEADDB22B9A1D6AE374BA7FC28C5.mlw
sha1: 19a751ff6c5abd8e209f72add9cd35dd8e3af409
sha256: a4f1f09a2b9bc87de90891da6c0fca28e2f88fd67034648060cef9862af9a3bf
sha512: 82a90ca9fc0fd8ceb4e2828e6efef31271e36ac698c92e77bdc0ea327d02b1277726d0dd9114fa17de7675a7a854b5597dbfdaa2af2794f61b2cf70158701670
ssdeep: 6144:wCJXBrPgXOySX4fx3xgGoSqs5OH420QmZ:ZvOSXMx3x1ob/T0
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4153174340 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Win64
ALYacTrojan.Agent.CobaltStrike
CylanceUnsafe
ZillyaTrojan.Shelma.Win64.5129
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win64/Shelma.de765b85
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
CyrenW32/Trojan.QOBG-2991
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.HLBW
APEXMalicious
AvastFileRepMalware
KasperskyTrojan.Win64.Shelma.ilq
NANO-AntivirusTrojan.Win32.PatchedWinSwrort.inshus
ViRobotTrojan.Win32.S.Agent.283648.EH
TencentWin64.Trojan.Shelma.Wjsc
SophosMal/Generic-R + Troj/Agent-BHCI
BitDefenderThetaGen:NN.ZedlaF.34692.ru4@auSMBtpi
TrendMicroTrojan.Win32.COBEACON.BD
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.dc
FireEyeGeneric.mg.600aceaddb22b9a1
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Shelma.hlp
AviraTR/AD.PatchedWinSwrort.xbdsz
KingsoftWin32.Troj.Undef.(kcloud)
AegisLabTrojan.Win64.Shelma.4!c
GDataWin32.Trojan.Agent.STKSZG
AhnLab-V3Trojan/Win.Shelma.C4501924
McAfeeRDN/Generic.dx
MAXmalware (ai score=99)
VBA32Trojan.Win64.Shelma
MalwarebytesMalware.AI.4153174340
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win32.COBEACON.BD
YandexTrojan.Shelma!Ytrtt0f6e2c
IkarusTrojan.Patched
MaxSecureTrojan.Malware.115460845.susgen
FortinetW64/Shelma.ILQ!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Malware.AI.4153174340?

Malware.AI.4153174340 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment