Malware.AI.4213345807 removal guide

The Malware.AI.4213345807 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4213345807 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.4213345807?


File Info:
name: 48546A93947208EAFD52.mlw
path: /opt/CAPEv2/storage/binaries/c7b481c8b5b0b40a716164ae5e092a66d9e63e0f31df70c4101398f4563c0962
crc32: 544B43A2
md5: 48546a93947208eafd5233decf83e497
sha1: da0163cc7a27daa2bc7d1401b6367985da8803a3
sha256: c7b481c8b5b0b40a716164ae5e092a66d9e63e0f31df70c4101398f4563c0962
sha512: f732a8d6ae9623b279dbf848a81a2bf55f5b70f8ce0d076155e095b714b84dddea112ba5e442e915d392377ad6c8c883a7baec07c8c96a0a4c31c3c9e482366a
ssdeep: 24576:/sOBTljU6OXPUcVuDEzET6Xth8YOBTljU6OzPUcVotPT9K:/XpVb6mEo6dUpVbu2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17F55BE01E646FA28CAC997B4943CC77D0534FD29B9CAA1073475BB2E19B3B5CCE191AC
sha3_384: 64ab03de9ed504b2ce026cd4545acc74a8a3c5d4d1d161bd43466818e06a325b937c8f3a9c880c04caab47bc99a3c6cc
ep_bytes: ff25002040009c9cc747442400005961
timestamp: 2022-02-05 11:10:16

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SandeLLo Checker
FileVersion: 1.2.2.3
InternalName: SandeLLo Checker.exe
LegalCopyright: Sandello.ru
LegalTrademarks: 
OriginalFilename: SandeLLo Checker.exe
ProductName: Checker
ProductVersion: 1.2.2.3
Assembly Version: 1.2.2.3

Malware.AI.4213345807 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.48272377
FireEye	Trojan.GenericKD.48272377
McAfee	GenericRXAA-AA!48546A939472
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.TE
K7AntiVirus	Unwanted-Program ( 0058dd6d1 )
K7GW	Unwanted-Program ( 0058dd6d1 )
Arcabit	Trojan.Generic.D2E093F9
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameTool_AGen.A potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09B822
BitDefender	Trojan.GenericKD.48272377
Avast	FileRepMalware
Ad-Aware	Trojan.GenericKD.48272377
Emsisoft	Trojan.GenericKD.48272377 (B)
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic PUA NK (PUA)
Ikarus	Trojan.Xiclog
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Trojan.GenericKD.48272377
ALYac	Trojan.GenericKD.48272377
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.4213345807
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/GameTool_AGen
AVG	FileRepMalware

How to remove Malware.AI.4213345807?

Malware.AI.4213345807 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X