Malware

Should I remove “Malware.AI.4160046791”?

Malware Removal

The Malware.AI.4160046791 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4160046791 virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4160046791?


File Info:

name: FD7458329D6444717C58.mlw
path: /opt/CAPEv2/storage/binaries/f2570c2baa6683654d06fff572ff960bcc0100ce03db3060cfc2e9fc5e4fa4d5
crc32: 01E7DBAF
md5: fd7458329d6444717c589e256f830804
sha1: b67e8557502e0401e178f3604f388d58eac99392
sha256: f2570c2baa6683654d06fff572ff960bcc0100ce03db3060cfc2e9fc5e4fa4d5
sha512: c6b87d0f496a75d9f58c142bcc77742b1ae804e5fe37a4beef93d1810fd7aa00cde0ec14c494e545e78e910ead6ad1d9824e556cbf01c8cc91965320f39edaa9
ssdeep: 3072:2wiEsC5n6qa1YcL32c1FekeJjSOoYXjOzo:AC51aZK0okehzXjO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FA37F5F7AC21FF3C5C603B9254784E7721D9275122776A04458CF2C12EFEA886FE689
sha3_384: dc72085d14eec92f5f1805496ab44624bc6d438e91e198262127df5538acba851edced8cfeb01ecead4c731e59ae5ae2
ep_bytes: 60909090909067e80000000090905890
timestamp: 2021-11-23 03:39:59

Version Info:

0: [No Data]

Malware.AI.4160046791 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
McAfeeArtemis!FD7458329D64
MalwarebytesMalware.AI.4160046791
ZillyaTrojan.Padodor.Win32.551648
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Pahador.QLFO-8537
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Padodor.NAM
APEXMalicious
ClamAVWin.Trojan.Crypted-36
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGenPack:Trojan.Agent.DQQO
NANO-AntivirusTrojan.Win32.Padodor.foufls
MicroWorld-eScanGenPack:Trojan.Agent.DQQO
AvastWin32:BackdoorX-gen [Trj]
TencentTrojan.Win32.Qukart.ya
TACHYONBackdoor/W32.Padodor
EmsisoftGenPack:Trojan.Agent.DQQO (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
DrWebBackDoor.HangUp.5
VIPREGenPack:Trojan.Agent.DQQO
TrendMicroTROJ_GEN.R03BC0DEL23
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.fd7458329d644471
SophosTroj/Padodor-M
SentinelOneStatic AI – Malicious PE
GDataGenPack:Trojan.Agent.DQQO
JiangminBackdoor.Padodor.esfe
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGenPack:Trojan.Agent.DQQO
ZoneAlarmBackdoor.Win32.Padodor.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
BitDefenderThetaAI:Packer.FBAF200121
ALYacGenPack:Trojan.Agent.DQQO
MAXmalware (ai score=81)
VBA32Backdoor.Padodor
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DEL23
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
YandexBackdoor.Padodor.AF
IkarusBackdoor.Win32.Padodor
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:BackdoorX-gen [Trj]
Cybereasonmalicious.29d644
DeepInstinctMALICIOUS

How to remove Malware.AI.4160046791?

Malware.AI.4160046791 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment