Malware

About “Malware.AI.4220211012” infection

Malware Removal

The Malware.AI.4220211012 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4220211012 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Expresses interest in specific running processes
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality

Related domains:

iplogger.com

How to determine Malware.AI.4220211012?


File Info:

crc32: B1C96BBF
md5: efcaf195ecc8a6ec69ce1e868830c88c
name: EFCAF195ECC8A6EC69CE1E868830C88C.mlw
sha1: 61c5df1f4b091f8c8843ba3e7ae99a9315e1c82c
sha256: 0336843fda13e7ced0f81c6350e9abcfe681f683b5322f6bb6207330e159ed63
sha512: 83faad2bce20074eaf9f0ff46f2942f0180ef242244138cc7ed25397b32add0630e8f081bd170bca47e704205157621b481efc5936a0b8bc613ebadfc8e7b6db
ssdeep: 98304:/2cPKidNaCbmWoBXXX/+NDxmjP9/FqbxlD0S5JwpLhAFCpWiDxPdpIexe:eCK6gWoBXHCFnlD02eAgf1dpIex
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Malware.AI.4220211012 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005642691 )
LionicHacktool.Win32.Gamehack.3!e
Elasticmalicious (high confidence)
DrWebTrojan.Inject3.5683
CynetMalicious (score: 100)
CAT-QuickHealTrojan.AutoIt.Nymeria.ZZ
ALYacTrojan.GenericKD.30396088
CylanceUnsafe
K7GWTrojan ( 005642691 )
Cybereasonmalicious.5ecc8a
SymantecTrojan.Gen.2
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.VBKrypt.zemj
BitDefenderTrojan.GenericKD.30396088
NANO-AntivirusTrojan.Win32.VBKrypt.eywaxb
MicroWorld-eScanTrojan.GenericKD.30396088
TencentWin32.Trojan.Vbkrypt.Apmw
Ad-AwareTrojan.GenericKD.30396088
SophosMal/Generic-R + Mal/FareitVB-L
ComodoMalware@#2hvgt4s97wfnp
BitDefenderThetaAI:Packer.32EF800116
VIPRETrojan.Win32.Generic!BT
TrendMicroPUA.Win32.UninstallTool.A
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.tc
FireEyeGeneric.mg.efcaf195ecc8a6ec
EmsisoftTrojan.GenericKD.30396088 (B)
AviraHEUR/AGEN.1100177
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.24FDA1C
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitTrojan.Generic.D1CFCEB8
GDataTrojan.GenericKD.30396088
TACHYONTrojan/W32.VBKrypt.5667328
AhnLab-V3Win-Trojan/VBKrand.Gen
McAfeeArtemis!EFCAF195ECC8
MalwarebytesMalware.AI.4220211012
PandaTrj/CI.A
TrendMicro-HouseCallPUA.Win32.UninstallTool.A
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Decept.A!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.4220211012?

Malware.AI.4220211012 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment