About “Malware.AI.4165941383” infection

The Malware.AI.4165941383 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4165941383 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Malware.AI.4165941383?


File Info:
name: 2D9DFDD182A4ED1DF66A.mlw
path: /opt/CAPEv2/storage/binaries/6879277866bb4e749888975fd5fda06725d3198edcd921cabfef0883233a1df0
crc32: 60B9D742
md5: 2d9dfdd182a4ed1df66aa692425c8658
sha1: a6b753502c8aed26b1ea64026f762d56835b5549
sha256: 6879277866bb4e749888975fd5fda06725d3198edcd921cabfef0883233a1df0
sha512: d687500fee404366555b00c9be9427699307107c5f54e016d767dbe23077d92f00be220b46d435eed924156d67d1d8f7e55c8ba7fd3ee59b74a6c253de1d1661
ssdeep: 192:6/1F4FOiQgl0Ze0mRCGa7VQJQvU96oXfBcPA:oL4FOhZACG1R6/o
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T145F1A409B3DC0118F9BE4B38B9B207224B71F9169A73DB6F9894016D1D727E04A75FB2
sha3_384: 8f9026e3781d540f50faef4598015345143ca9129aedd83113cf25f81a85220bed6c5054234d789b855dc037cee4d1f0
ep_bytes: ff250020001000000000000000000000
timestamp: 2016-08-28 15:20:36

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: 1gcgewq1.dll
LegalCopyright:  
OriginalFilename: 1gcgewq1.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Malware.AI.4165941383 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Zapchast.4!c
Skyhigh	BehavesLike.Win32.Infected.zt
McAfee	Artemis!2D9DFDD182A4
VirIT	Trojan.Win32.MSIL9.BGJT
ClamAV	Win.Packed.Zapchast-6840435-0
NANO-Antivirus	Trojan.Win32.RiskGen.ehaxnr
Avast	Win32:Malware-gen
Ikarus	Trojan.MSIL.Zapchast
Antiy-AVL	GrayWare/Win32.Presenoker
Microsoft	PUA:Win32/Presenoker
Google	Detected
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.4165941383
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CL523
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Zapchast.B8B8!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Malware.AI.4165941383?

Malware.AI.4165941383 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X