Malware

Malware.AI.4220493279 information

Malware Removal

The Malware.AI.4220493279 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4220493279 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Malware.AI.4220493279?


File Info:

name: A4815681340EB6D59CE2.mlw
path: /opt/CAPEv2/storage/binaries/9c3b0e4670cca058e1b82dab27b9d9ed6c14e7ac8809dd0a4b0c7f94ac3251eb
crc32: 5315B386
md5: a4815681340eb6d59ce2387d8acc8232
sha1: 0bf0c3e9a71671b610095f264cd9606a76069c74
sha256: 9c3b0e4670cca058e1b82dab27b9d9ed6c14e7ac8809dd0a4b0c7f94ac3251eb
sha512: e80283edef6c2447e6958f1f275a9187497a21976c211ba51bf86a962751f603d11d0cfea9157363db4249ef4d34ad2761bc634a3685cd875cbadcba2e60ebc8
ssdeep: 12288:tCsqwvXRJmrE7vJSUMWrvnRmsXhmaJ4Kqf3gQ6rsnXVplZgI1Jzb5/b6:tlZvXLKEIUMeIIH4dYQ6YrHgI1Nb1+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T128F4237B229CD857E29A19F81BF09E258A79FE372383644323047EE335765D758A803D
sha3_384: 78cfd7d9d03ca5cca8a50430256cbc37c809d09e0d17373fb877fe14a2996d0a9d2bd8f5cbf1b9c751917433663a8876
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:46

Version Info:

CompanyName: www.bearpc.net
FileDescription: 愤怒的小鸟PC汉化版
FileVersion: 1.0.0
LegalCopyright: BEARPC精选软件集
ProductName: 愤怒的小鸟
Translation: 0x0804 0x03a8

Malware.AI.4220493279 also known as:

Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Bulz.256291
CAT-QuickHealApplication.Agent.ZZ5
McAfeeArtemis!A4815681340E
CylanceUnsafe
VIPREGen:Variant.Bulz.256291
K7AntiVirusUnwanted-Program ( 0040f9f81 )
K7GWUnwanted-Program ( 0040f9f81 )
Cybereasonmalicious.1340eb
CyrenW32/Adware.QSLK-0351
ESET-NOD32NSIS/TrojanDownloader.Chindo.R
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R067C0OJ122
KasperskyHEUR:Trojan.Win32.Bingoml.gen
BitDefenderGen:Variant.Bulz.256291
NANO-AntivirusRiskware.Win32.Wews87.fcdlba
AvastNSIS:Downloader-ABR [Trj]
Ad-AwareGen:Variant.Bulz.256291
SophosBearPC (PUA)
BaiduNSIS.Trojan-Downloader.Agent.k
ZillyaAdware.Generic.Win32.141311
TrendMicroTROJ_GEN.R067C0OJ122
McAfee-GW-EditionBehavesLike.Win32.BadFile.bc
FireEyeGen:Variant.Bulz.256291
EmsisoftGen:Variant.Bulz.256291 (B)
GDataWin32.Application.NetBear.B
GoogleDetected
MAXmalware (ai score=88)
MicrosoftPUA:Win32/GameApp37
VBA32Trojan.Wacatac
ALYacGen:Variant.Bulz.256291
MalwarebytesMalware.AI.4220493279
RisingPUA.Wews87!8.642 (CLOUD)
IkarusTrojan-Downloader.NSIS.Chindo
FortinetW32/Chindo.H!tr.dldr
AVGNSIS:Downloader-ABR [Trj]
CrowdStrikewin/grayware_confidence_90% (W)

How to remove Malware.AI.4220493279?

Malware.AI.4220493279 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment