Malware

Malware.AI.4220127208 removal guide

Malware Removal

The Malware.AI.4220127208 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Malware.AI.4220127208 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Authenticode signature is invalid

How to determine Malware.AI.4220127208?


File Info:

name: 817B114038FB4CA845C6.mlw
path: /opt/CAPEv2/storage/binaries/34a803a7f50bf075e6f76ac56aa1e6058e4df1a2a6bf007ca1a973b5cc833f7d
crc32: E07FED47
md5: 817b114038fb4ca845c6c2fb4e6478ee
sha1: 14d8bf7c3aff88e247ecc5f3952d52fee3ea472c
sha256: 34a803a7f50bf075e6f76ac56aa1e6058e4df1a2a6bf007ca1a973b5cc833f7d
sha512: b405d7b0e52114390d10942788f5a86b5bb71845e89aac1f2de199218fde1265fba2717299c37563152fdc2d0259e1e688daf960fa8e8f1071de0f5829259394
ssdeep: 6144:WPmKHhC38bY/nyKQEuZuwWn8e1kn7/Oz3:WPmKdYvybZ3E8e1kQ3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1462401403A51C9E3D2AE43741ECB9C9FA9346D21EA20E747F695B2DCAD723D9385A130
sha3_384: ef2657063a60dfa6fb742ff0189d6a27bc2330a55de730c726f736f4dc1162ce59af64b182a3a66090dfbb97547c8521
ep_bytes: 9cc704243f164700e874acffffb1e403
timestamp: 2013-02-04 23:06:48

Version Info:

CompanyName: Advanced Micro Devices, Inc.
FileDescription: AMD SDK APIx86 Framework
FileVersion: 2.0.3.1
InternalName: svxdial.exe
LegalCopyright: Copyright (c) 2014, Advanced Micro Devices, Inc.
LegalTrademarks: AMD Catalyst™ 2014, Advanced Micro Devices, Inc.
OriginalFilename: svxdial.exe
ProductName: Catalyst Framework Library APIx86
ProductVersion: 2.0.3.1
Translation: 0x0409 0x04b0

Malware.AI.4220127208 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.210121
FireEyeGeneric.mg.817b114038fb4ca8
ALYacGen:Variant.Barys.210121
CylanceUnsafe
SangforTrojan.Win32.Wacatac.C
K7AntiVirusTrojan ( 7000000f1 )
AlibabaTrojan:BAT/CoinMiner.01746772
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.038fb4
SymantecML.Attribute.HighConfidence
ESET-NOD32BAT/CoinMiner.LU
TrendMicro-HouseCallTROJ_GEN.R002H0CBI22
BitDefenderGen:Variant.Barys.210121
AvastWin32:Malware-gen
TencentWin32.Trojan.Coinminer.Dyqd
Ad-AwareGen:Variant.Barys.210121
EmsisoftGen:Variant.Barys.210121 (B)
ZillyaTrojan.CoinMiner.BAT.46
McAfee-GW-EditionBehavesLike.Win32.Downloader.dc
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
GDataGen:Variant.Barys.210121
AviraTR/CoinMiner.jftms
MAXmalware (ai score=100)
KingsoftWin32.Troj.Generic.v.(kcloud)
MicrosoftVirTool:MSIL/SharpStay
CynetMalicious (score: 100)
Acronissuspicious
McAfeeArtemis!817B114038FB
MalwarebytesMalware.AI.4220127208
ZonerProbably Heur.ExeHeaderL
RisingTrojan.CoinMiner!8.30A (C64:YzY0OvbkYHFj5T74iYtVByk1NGA)
IkarusTrojan.BAT.CoinMiner
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.4220127208?

Malware.AI.4220127208 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment