Malware

How to remove “Malware.AI.4221753693”?

Malware Removal

The Malware.AI.4221753693 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4221753693 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Enumerates running processes
  • Expresses interest in specific running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.4221753693?


File Info:

name: E18B324AE1ADC436379E.mlw
path: /opt/CAPEv2/storage/binaries/c199d97a3f0ccfe5e2bacce04ca3d4547244eff824c14a0365c14a0b5169feb3
crc32: 5FDBD343
md5: e18b324ae1adc436379e1aff31451b66
sha1: 277d0d0f9497ec9c929aff0e5ee5480ddec6082e
sha256: c199d97a3f0ccfe5e2bacce04ca3d4547244eff824c14a0365c14a0b5169feb3
sha512: 2906000f787dd510fac27ca2f07712fe15d67c00607a84f9d3dafb34ebf458d5ac4618f21e2e652e84851de1218e1d554cef40ca8d20a14eda1b85a6d6dbed8a
ssdeep: 768:MLGM9Ifejbgbd1a2HL/6fZlpvgIw3p2kal4F4ulCwCR1tatl:MLG6Iy0d1NsbpvgrIkal4yu3CRWtl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1BA53291E3C57C0B3E8054875869482C29FBF6D0336E7A47FFF59058A5EE1288566ABF0
sha3_384: 1ce27ddd13f4298e589f42cbf663913939dbe54c34021b3ce221007ad72d782f00eae225d4c3d3bf966767310d9b8d83
ep_bytes: e8c1250000e940feffff558bec81ec28
timestamp: 2008-10-05 20:16:29

Version Info:

0: [No Data]

Malware.AI.4221753693 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanApplication.Htool.WGV
FireEyeGeneric.mg.e18b324ae1adc436
CAT-QuickHealTrojan.Agent
ALYacApplication.Htool.WGV
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Wacatac.A
K7AntiVirusTrojan ( 0048dddb1 )
K7GWTrojan ( 0048dddb1 )
Cybereasonmalicious.ae1adc
BitDefenderThetaGen:NN.ZexaCO.34294.dqW@aqI47Lgi
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/GameHack.KE potentially unsafe
Paloaltogeneric.ml
ClamAVWin.Trojan.Htool-9
BitDefenderApplication.Htool.WGV
AvastWin32:Injector-ARF [PUP]
Ad-AwareApplication.Htool.WGV
EmsisoftApplication.Htool.WGV (B)
ComodoMalware@#r5rhwhv5ugb9
ZillyaTrojan.CPEX.Win32.15838
McAfee-GW-EditionBehavesLike.Win32.BadFile.km
SophosGeneric PUA CH (PUA)
SentinelOneStatic AI – Suspicious PE
GDataApplication.Htool.WGV
AviraHEUR/Patched.Ren
MAXmalware (ai score=98)
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.A!ml
CynetMalicious (score: 70)
McAfeeArtemis!E18B324AE1AD
MalwarebytesMalware.AI.4221753693
APEXMalicious
YandexRiskware.Agent!SE7QSXPNbZ8
IkarusApplication.Htool
FortinetRiskware/GameHack
AVGWin32:Injector-ARF [PUP]

How to remove Malware.AI.4221753693?

Malware.AI.4221753693 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment