Malware

Malware.AI.4212259536 removal

Malware Removal

The Malware.AI.4212259536 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4212259536 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Interacts with a unique set of registry keys observed in malware
  • Attempts to modify Internet Explorer’s start page
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Detects Bochs through the presence of a registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Attempted to write directly to a physical drive
  • Attempts to modify proxy settings
  • Attempts to modify browser security settings
  • Attempts to disable browser security warnings
  • Harvests cookies for information gathering
  • Collects information to fingerprint the system
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4212259536?


File Info:

name: B78E3D6531457344CBDC.mlw
path: /opt/CAPEv2/storage/binaries/60fd8330e3174644a17f9049111e54e8f9ea2faf0895fd71944dea3230d4fafc
crc32: D2B03BB5
md5: b78e3d6531457344cbdcd1ce3fb1f8d8
sha1: 1ed67c19b2930e935edea97a37983c03a5b394fc
sha256: 60fd8330e3174644a17f9049111e54e8f9ea2faf0895fd71944dea3230d4fafc
sha512: ac0d477b2364b0ef84efc6bcdecf22f5ab620669023aef0f1349999c7beadbc701bf4c3232b978e029bd4c727366801af34ba4dc8195c343c60239bcf2a3c4fd
ssdeep: 768:SjPci0wUygGfr5160/K4YWw5u09oQmgiGuFiPW/c03iDWDht8v1K2gA024q:oP/KjGfr57/K6/gMYPWiwht84q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T191638E2AB8D1417BC483017215651F167FBAFA3206A185C3D7D4695A6E338EECF3B247
sha3_384: cc372470c2a5973d18e9c4c1ca239c8f89c8f9810c21dfb4671e4179f0ace5eb5cab3656a4028cd2377acb8a3535f253
ep_bytes: 558bec6aff68d8b1400068f474400064
timestamp: 2012-11-06 06:57:46

Version Info:

0: [No Data]

Malware.AI.4212259536 also known as:

LionicTrojan.Win32.Bewymids.m!c
tehtrisGeneric.Malware
DrWebTrojan.StartPage.50026
MicroWorld-eScanGen:Variant.Zusy.54159
FireEyeGeneric.mg.b78e3d6531457344
McAfeeGenericRXHD-NU!B78E3D653145
CylanceUnsafe
ZillyaTrojan.Genome.Win32.233318
SangforTrojan.Win32.AGEN.1010938
K7AntiVirusRiskware ( 0040eff71 )
AlibabaBackdoor:Win32/Bewymids.d8f7c32a
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.531457
BitDefenderThetaGen:NN.ZexaF.34606.emX@a4ekBej
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Bewymids.A
APEXMalicious
TrendMicro-HouseCallTROJ_SPNR.35CB13
Paloaltogeneric.ml
KasperskyBackdoor.Win32.Bewymids.ab
BitDefenderGen:Variant.Zusy.54159
NANO-AntivirusTrojan.Win32.StartPage.bgwron
AvastWin32:Agent-AUOQ [Spy]
TencentWin32.Backdoor.Bewymids.Pgda
Ad-AwareGen:Variant.Zusy.54159
EmsisoftGen:Variant.Zusy.54159 (B)
ComodoMalware@#2k9pw69uewvxy
F-SecureTrojan.TR/Bewymids.A.7
VIPREGen:Variant.Zusy.54159
TrendMicroTROJ_SPNR.35CB13
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.km
SophosMal/Generic-S + Mal/Bewymids-A
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Zusy.54159
JiangminTrojan.Generic.hiycy
GoogleDetected
AviraTR/Bewymids.A.7
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.Genome
ArcabitTrojan.Zusy.DD38F
ViRobotTrojan.Win32.Z.Bewymids.69736
ZoneAlarmBackdoor.Win32.Bewymids.ab
MicrosoftTrojan:Win32/Bewymids.A
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Bewymids.C229974
VBA32BScope.Backdoor.Bewymids
ALYacGen:Variant.Zusy.54159
MalwarebytesMalware.AI.4212259536
RisingTrojan.Bewymids!8.B2D (TFE:6:fHTawNWwuoK)
YandexTrojan.Genome!WNLQxHlFIpU
IkarusTrojan.Win32.Bewymids
MaxSecureTrojan.Malware.2078192.susgen
FortinetW32/Bewymids.A
AVGWin32:Agent-AUOQ [Spy]
PandaGeneric Malware
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.4212259536?

Malware.AI.4212259536 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment