Malware

What is “Malware.AI.4201849465”?

Malware Removal

The Malware.AI.4201849465 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4201849465 virus can do?

  • A file was accessed within the Public folder.
  • Uses Windows utilities for basic functionality
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4201849465?


File Info:

name: 505AF40378E7F9D81741.mlw
path: /opt/CAPEv2/storage/binaries/0a10c0a1c06ec174c11f35e42cd0f781ee687898e32bc7752f0867039cede985
crc32: 0E98EA51
md5: 505af40378e7f9d8174162e5e98ffd9d
sha1: 2b1993dc6c6b1d0bbafa9230654d0845b0ee2345
sha256: 0a10c0a1c06ec174c11f35e42cd0f781ee687898e32bc7752f0867039cede985
sha512: 41f5e827a58e984bfbb46a420a66d3268d2ca7fabe30271702db1257c21363d2a47b47d5890752ae435dc460fae30fc0c14e5b576715e92672638234cca01db8
ssdeep: 3072:G7DhdC6kzWypvaQ0FxyNTBfoR/8eu/FhIs:GBlkZvaF4NTBARG5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12BF38C01B6D052F3E6E5083201E6B12E873D7A349F5498DBD35C3A46A632ED4A6397FC
sha3_384: 36e0015f7e90879be13e4127fd4859433cd426265901e7f3919da2bdec8638b18f03624bd633d08f1029dc7f552ced73
ep_bytes: 68ac00000068000000006868804100e8
timestamp: 2019-07-30 08:52:45

Version Info:

0: [No Data]

Malware.AI.4201849465 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ClamAVWin.Trojan.Generic-10011119-0
FireEyeGeneric.mg.505af40378e7f9d8
CAT-QuickHealTrojan.FuerboosPMF.S18713185
SkyhighBehavesLike.Win32.RealProtect.cm
McAfeeRDN/Generic.dx
MalwarebytesMalware.AI.4201849465
SangforTrojan.Win32.Save.a
CynetMalicious (score: 100)
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
AhnLab-V3Malware/Win.Generic.C5265142
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06K623
RisingTrojan.Generic@AI.98 (RDML:NiHIUk/Gis9OKpEwmo0qBQ)
MaxSecureTrojan.Malware.3411146.susgen
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS

How to remove Malware.AI.4201849465?

Malware.AI.4201849465 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment