Malware

Malware.AI.4163517929 removal guide

Malware Removal

The Malware.AI.4163517929 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4163517929 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.4163517929?


File Info:

name: 0AFEF0A9E33B7A9B664C.mlw
path: /opt/CAPEv2/storage/binaries/82ac2fdb2db3f87fd6033e6e01dd13b78f8aa5542eb2e1dff87fc958dcd83a12
crc32: C2E9CF1F
md5: 0afef0a9e33b7a9b664c34f30f33e18c
sha1: 0a60588358dcd5299abc731887fb11179a9945be
sha256: 82ac2fdb2db3f87fd6033e6e01dd13b78f8aa5542eb2e1dff87fc958dcd83a12
sha512: 451fe492ff18b28e6fd7225eae876789989ac9de8c9d38c99b120a7c9d8279515bec1b3c4bd62fc057c2fcbfd16d8ea3f69e64eaf597f36af341d33560154f9f
ssdeep: 6144:auIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLwiWjafdW14/i4r/fsg+Oy1:x6Wq4aaE6KwyF5L0Y2D1PqLwVaI14/dA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F18423EFB996B201E4B891B7EDC60743C1D8BA22877957B6B1207D42BCBF1001D96F85
sha3_384: 79aabc7df4cda81567072ef718363ff65bb4e63c89879bf4f9c6168d3095d2cfb6f1d4eb277a8f24ef9393df305d5672
ep_bytes: 60be002047008dbe00f0f8ff57eb0b90
timestamp: 2012-01-29 21:32:28

Version Info:

FileVersion: 0.4.0.70
Comments: Сбор сведений о системе
FileDescription: SITLog
LegalCopyright: glax24
Производитель: zone.cc)
Translation: 0x0419 0x04b0

Malware.AI.4163517929 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Ursu.140335
FireEyeGen:Variant.Ursu.140335
SkyhighArtemis
McAfeeArtemis!0AFEF0A9E33B
MalwarebytesMalware.AI.4163517929
VIPREGen:Variant.Ursu.140335
Paloaltogeneric.ml
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002H09C524
BitDefenderGen:Variant.Ursu.140335
EmsisoftGen:Variant.Ursu.140335 (B)
Trapminesuspicious.low.ml.score
ArcabitTrojan.Ursu.D2242F
GDataGen:Variant.Ursu.140335
CynetMalicious (score: 100)
ALYacGen:Variant.Ursu.140335
Cylanceunsafe
MAXmalware (ai score=85)
MaxSecureTrojan.Autoit.AZA
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Ursu

How to remove Malware.AI.4163517929?

Malware.AI.4163517929 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment