Malware.AI.4220251828 removal instruction

The Malware.AI.4220251828 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4220251828 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.4220251828?


File Info:
name: 0A77CF6520A3FC0A86C5.mlw
path: /opt/CAPEv2/storage/binaries/61bc6ba424d29f173f2302fcf226744b30cb2d3b54cd95bfb392ef100889f495
crc32: 09E882E2
md5: 0a77cf6520a3fc0a86c5c61fca9f5142
sha1: 0debe40f31feaf1b9664ffe49b152b053a70b0cf
sha256: 61bc6ba424d29f173f2302fcf226744b30cb2d3b54cd95bfb392ef100889f495
sha512: 9ae0f0bc66c71592e17fa11c4b73854f196cb9d5b4bf547c4b014dd5cd8e8e7ecf0b66eb5e4f45d455dd24afbbc426ace3a76caa90e222cbfd54912b9af4e6c0
ssdeep: 24576:76nGyka6jwf93TURooVYnmd3Uo9hx+LDKUEC:7YGyAEf5URTKoXUEC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E6454C21B2C14C36D07F2A7F485766DC58257E122B27E84526F93D8FCA396813CBDE92
sha3_384: d00f0b2a6b5b4fdec48dc1a686812f8dfb48a6490fd1f3a3e4d1a9da807a955efb3b7a6184943faf528e4f0a9314198e
ep_bytes: 558bec83c4ec33c08945ecb804654f00
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: PC28CC Game Company
FileDescription: 
FileVersion: 3.0.6.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: PC28CC Game
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0804 0x03a8

Malware.AI.4220251828 also known as:

Lionic	Trojan.Win32.Vilers.4!c
MicroWorld-eScan	Gen:Variant.Doina.21908
FireEye	Generic.mg.0a77cf6520a3fc0a
CAT-QuickHeal	Trojan.Vilers
Skyhigh	BehavesLike.Win32.Xanfpezes.th
ALYac	Gen:Variant.Doina.21908
Cylance	unsafe
VIPRE	Gen:Variant.Doina.21908
Sangfor	Trojan.Win32.Agent.V8mr
K7AntiVirus	Unwanted-Program ( 004dfb9c1 )
BitDefender	Gen:Variant.Doina.21908
K7GW	Unwanted-Program ( 004dfb9c1 )
CrowdStrike	win/malicious_confidence_70% (D)
BitDefenderTheta	Gen:NN.ZelphiF.36792.iP0@aC29hRob
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Patched.F potentially unsafe
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Vilers.gen
Rising	Trojan.Generic@AI.100 (RDML:Gu/25VzJQ0I3CgX6TgbzBQ)
Emsisoft	Gen:Variant.Doina.21908 (B)
DrWeb	Trojan.DownLoader41.12495
Zillya	Trojan.Vilers.Win32.1
Trapmine	malicious.high.ml.score
Sophos	Generic Reputation PUA (PUA)
GData	Gen:Variant.Doina.21908
MAX	malware (ai score=81)
Antiy-AVL	RiskWare/Win32.Patched
Arcabit	Trojan.Doina.D5594
ZoneAlarm	HEUR:Trojan.Win32.Vilers.gen
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Malware/Win.Generic.C5466298
VBA32	BScope.Trojan.Vilers
DeepInstinct	MALICIOUS
Malwarebytes	Malware.AI.4220251828
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H07JO23
Tencent	Malware.Win32.Gencirc.11a50ba8
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Malware-gen
Cybereason	malicious.f31fea
Avast	Win32:Malware-gen

How to remove Malware.AI.4220251828?

Malware.AI.4220251828 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X