Malware

Malware.AI.4178555598 removal tips

Malware Removal

The Malware.AI.4178555598 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4178555598 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Sample contains Overlay data
  • Possible date expiration check, exits too soon after checking local time
  • Guard pages use detected – possible anti-debugging.
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with ASPack
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Sets an Autoconfig URL, likely to hijack browser settings.
  • Deletes executed files from disk
  • Anomalous binary characteristics

How to determine Malware.AI.4178555598?


File Info:

name: 016ACBEBBB7AF6CE88D9.mlw
path: /opt/CAPEv2/storage/binaries/43075295a1d3a841d97ea965129f8188d744fec6768ad786f033e706e0c20d13
crc32: 80825D73
md5: 016acbebbb7af6ce88d9ea4698ffcf9e
sha1: 16ee1c80513c759c8a7bbfb83609b5a775bd8e6a
sha256: 43075295a1d3a841d97ea965129f8188d744fec6768ad786f033e706e0c20d13
sha512: ce3414f460cadb43650b8f78a2e10943611a7b14942b818bd8b8b760f7aabdc78750ffad34e2c105fad5f91c2da0dba2be255418e4cf44e566438d041ec09850
ssdeep: 1536:iZwzs8jsdO0BVp4cHBBwppiIkJZLwZLQLws00YHYFdTE2w:iZXO0BnxH/2gxwxQxrY4F9w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C4733A03BAC68574E651067318B57B9E526FFA710F606FDBF3C84A2D08A41D28E32D5B
sha3_384: 081099255c1aef51b08045a13b909bbe443e89a37d85a00bc64cb2f53df8b2c1595aecac10775446cdd7225a1eb7f06a
ep_bytes: e8b5050000e98efeffffff2560024100
timestamp: 2022-04-18 06:07:07

Version Info:

0: [No Data]

Malware.AI.4178555598 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fugrafa.249250
FireEyeGeneric.mg.016acbebbb7af6ce
ALYacGen:Variant.Fugrafa.249250
CylanceUnsafe
VIPREGen:Variant.Fugrafa.249250
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanProxy.Agent.OEO
APEXMalicious
KasperskyVHO:Trojan.Win32.Agent.gen
BitDefenderGen:Variant.Fugrafa.249250
Ad-AwareGen:Variant.Fugrafa.249250
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Dropper.lh
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Fugrafa.249250 (B)
GDataGen:Variant.Fugrafa.249250
MAXmalware (ai score=89)
ArcabitTrojan.Fugrafa.D3CDA2
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
McAfeeRDN/Real Protect-LS
MalwarebytesMalware.AI.4178555598
SentinelOneStatic AI – Malicious PE

How to remove Malware.AI.4178555598?

Malware.AI.4178555598 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment