Malware

How to remove “Malware.AI.4160149004”?

Malware Removal

The Malware.AI.4160149004 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4160149004 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.4160149004?


File Info:

crc32: B6D7EA8D
md5: a471e176238858ffa7b34c561a541a02
name: A471E176238858FFA7B34C561A541A02.mlw
sha1: be67eb1ac5e2dad24837f69eb00802eb7b10116d
sha256: 25d7019f9690bf5d8aff9842b6764466c65f611ee7610e5b47d396422b76ba1c
sha512: b1e73f819b3279337cc680f402256ad022ce4a05c278e7001f7b8135477a23a9f2b10000aa63e1cdd22eb2e35dd47a19b3ecaa00b20d0184fbbe32fa34316718
ssdeep: 12288:nwZ9Lf+1ydCL7FP2CGdA7ZpGnlsz/dE8K8uwx3cti90Qbug2r4AhaXOiXn88888:wrL+1ysNBGO7ZpGls5A8r3cgTug2r4Z
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2012-2017
InternalName: balaba
FileVersion: 3.5.16.60
CompanyName: Dehelu Software Ltd.
LegalTrademarks:
ProductName: Fedopekac Carog 55 Dabibur
ProductVersion: 1.8.33.74
FileDescription: Sanogol
OriginalFilename: balaba.exe

Malware.AI.4160149004 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005380ab1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.40bcb502
K7GWAdware ( 005380ab1 )
Cybereasonmalicious.623885
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/DealPly.SE potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:AdWare.Win32.DealPly.dmflm
BitDefenderAdware.DealPly.2.Gen
NANO-AntivirusRiskware.Win32.DealPly.ffimly
ViRobotAdware.Dealply.662528.AJU
MicroWorld-eScanAdware.DealPly.2.Gen
TencentWin32.Adware.Dealply.Llqn
Ad-AwareAdware.DealPly.2.Gen
SophosGeneric PUA LO (PUA)
ComodoApplicUnwnt@#88g73uxi21gt
BitDefenderThetaGen:NN.ZelphiF.34266.OK0@aq1K1oki
TrendMicroTROJ_GEN.R002C0OK921
McAfee-GW-EditionBehavesLike.Win32.Adware.jh
FireEyeGeneric.mg.a471e176238858ff
EmsisoftAdware.DealPly.2.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.pbba
AviraHEUR/AGEN.1114815
Antiy-AVLTrojan/Generic.ASMalwS.26F1E30
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataAdware.DealPly.2.Gen
AhnLab-V3PUP/Win32.DealPly.C2694443
Acronissuspicious
McAfeeRDN/Generic PUP.x
MAXmalware (ai score=63)
VBA32TScope.Trojan.Delf
MalwarebytesMalware.AI.4160149004
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0OK921
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.DealPly!0z24ph98Cl0
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agen.0754!tr
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.4160149004?

Malware.AI.4160149004 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment