Malware

Malware.AI.4167001496 removal instruction

Malware Removal

The Malware.AI.4167001496 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4167001496 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Unconventionial binary language: Arabic (Algeria)
  • Unconventionial language used in binary resources: Serbian (Cyrillic)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4167001496?


File Info:

name: 7035E74073689C8D7FE4.mlw
path: /opt/CAPEv2/storage/binaries/14c965eb30554a898531cbb19e232f9a114a95e07e8e6dda7ead33d57d92925b
crc32: 0E49BB3F
md5: 7035e74073689c8d7fe4a7e1fe3b5a35
sha1: d7dcef83b691d4c159bbc6c13981eb2891e9a8e7
sha256: 14c965eb30554a898531cbb19e232f9a114a95e07e8e6dda7ead33d57d92925b
sha512: e77d0360b623d5fdfc3b33df44551f37f22d0d5ec97f2ece66c6a07ff77cdb3aba3ede6a0934443f44b5a175894156ae67b66b83663d8d605f656605189d5259
ssdeep: 12288:kW9B+VxV/l3sl9PuWyi1MH7NvwFw8EDixFpuS4EsMeCBMWvPoBxFOTE:kW9BMl8l9Pk887iFw8AIpV15vPYF2E
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14DE4F116B6F8515DF0B35B34A8B597A18A7AFC33CA38DB2E16C0161D0D30961DA21F7B
sha3_384: f78220fcdf064a5c2e9b322b4c6c7f1f90d6a4ef9bbf892b5b7c5231757c4d01d8221d6fbe1da8ed3e222fd6ab342fb5
ep_bytes: e8b9bb0a00e97afeffffc3558bec6a00
timestamp: 2021-04-13 02:35:48

Version Info:

CompanyName: Google LLC
FileDescription: Google Installer
FileVersion: 1.3.36.81
InternalName: Google Update
LegalCopyright: Ауторска права 2007–2010. Google LLC
OriginalFilename: GoogleUpdate.exe
ProductName: Google ажурирање
ProductVersion: 1.3.36.81
Translation: 0x081a 0x04e2

Malware.AI.4167001496 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanWin32.Expiro.Gen.7
FireEyeGeneric.mg.7035e74073689c8d
CAT-QuickHealW32.Expiro.R3
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusVirus ( 005a8b911 )
K7GWVirus ( 005a8b911 )
Cybereasonmalicious.3b691d
BitDefenderThetaGen:NN.ZexaF.36662.Su0@aWN9iVfP
CyrenW32/Expiro.AU.gen!Eldorado
SymantecW32.Xpiro.J!dam
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Expiro.NDP
KasperskyVirus.Win32.Moiva.a
BitDefenderWin32.Expiro.Gen.7
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
AvastWin32:Vitro [Inf]
SophosW32/Moiva-C
F-SecureMalware.W32/Infector.Gen
DrWebWin32.Expiro.158
VIPREWin32.Expiro.Gen.7
TrendMicroVirus.Win32.EXPIRO.JMA
McAfee-GW-EditionBehavesLike.Win32.Lockbit.bc
Trapminemalicious.high.ml.score
EmsisoftWin32.Expiro.Gen.7 (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Expiro.Gen.7
GoogleDetected
AviraW32/Infector.Gen
Antiy-AVLVirus/Win32.Expiro.x
ArcabitWin32.Expiro.Gen.7
ZoneAlarmVirus.Win32.Moiva.a
MicrosoftVirus:Win32/Expiro.NDP!MTB
CynetMalicious (score: 100)
AhnLab-V3Virus/Win.Expiro.X2164
Acronissuspicious
VBA32Trojan.Sabsik.TE
MAXmalware (ai score=87)
MalwarebytesMalware.AI.4167001496
PandaW32/Moyv.A
APEXMalicious
RisingTrojan.Generic@AI.100 (RDML:eWNYH5p8ohFILhAr5Y3pAg)
TACHYONVirus/W32.Movia
FortinetW32/Expiro.NDP!tr
AVGWin32:Vitro [Inf]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.4167001496?

Malware.AI.4167001496 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment