Should I remove “Malware.AI.4212216842”?

The Malware.AI.4212216842 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4212216842 virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.4212216842?


File Info:
name: A4A31C4D5E4797F4E3A9.mlw
path: /opt/CAPEv2/storage/binaries/4debe86632d5e3c2086a08677e2f513133767aadd629956ac0a96af235cef660
crc32: 7EDD81EE
md5: a4a31c4d5e4797f4e3a974d70659ade5
sha1: 0775cb6058c9b9e27fbba5ae15b9a3a119665296
sha256: 4debe86632d5e3c2086a08677e2f513133767aadd629956ac0a96af235cef660
sha512: e4e7f6ff8c41fbc0fbe376671f7d9e18af7d1045c34e79d69fc5ab60ac2c5579c33aa0d2ef3489a5ac16475b6440cca56a3705279d8770660d396d5f696e25e7
ssdeep: 6144:0K6HhWCL4cWv7twrpnEu0Z9SALyrvPAuPGkhhTBSvM2R5ioS:0K6BV4citw1nEuUSbhhTcvMwioS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T145B45C9277428C37E47736704E4B83991A347E102F36A9872BB43E5C2F75281F9263A7
sha3_384: 249d0b103e4522221953a3f1fb8c9c07da4610953f26b8c0a1597109fae58e994920a9b6baf9eefd62a85bce8afde7b7
ep_bytes: 60be00904f008dbe0080f0ffc7879ca0
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: Kalyuk Vitaliy (KVSoft in Ukraine)
FileDescription: Windows StartUp Explorer
FileVersion: 1.1.1.12
InternalName: StartUpExplorer.exe
LegalCopyright: (c) 2016 Kalyuk Vitaliy. All rights reserved.
LegalTrademarks: 
OriginalFilename: StartUpExplorer.exe
ProductName: StartUp Explorer
ProductVersion: 1.x
Comments: Made in Ukraine
Translation: 0x0409 0x04e4

Malware.AI.4212216842 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.GenericKD.68421221
FireEye	Generic.mg.a4a31c4d5e4797f4
McAfee	Artemis!A4A31C4D5E47
Malwarebytes	Malware.AI.4212216842
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKD.68421221
Emsisoft	Trojan.GenericKD.68421221 (B)
VIPRE	Trojan.GenericKD.68421221
McAfee-GW-Edition	BehavesLike.Win32.Generic.hm
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.68421221
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Win32.Sabsik
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Generic.D4140665
Microsoft	Program:Win32/Wacapew.C!ml
ALYac	Trojan.GenericKD.68421221
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09H323
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.215247125.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove Malware.AI.4212216842?

Malware.AI.4212216842 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X