Malware.AI.4221885024 removal instruction

The Malware.AI.4221885024 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4221885024 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Enumerates the modules from a process (may be used to locate base addresses in process injection)
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Malware.AI.4221885024?

File Info:
name: AED4C3BF9CEE98370792.mlw
path: /opt/CAPEv2/storage/binaries/6a8e119a208ba8883b25ce220cb909a4da2521cbc70cba5ddac3e3271245f610
crc32: 97AA0085
md5: aed4c3bf9cee983707928b3c18e476f5
sha1: 16624ed1dba5db4d8e3a569d1e7482109c4aae31
sha256: 6a8e119a208ba8883b25ce220cb909a4da2521cbc70cba5ddac3e3271245f610
sha512: 52f4618f7649cfdd992b7a51aa787745b69d2372e812e20e0d8a419e4e5ee7f3cb8d8dfa467f2e60c57c1493bdcae53f47abd98a5ee15ec35f07f67ff1598545
ssdeep: 6144:ibh4zbtQdiicI0Zqg/vY+0gvBu5P8GsJT3jIvqE8bRR8G7:ibcxlI0ZqggNgvBeP8nJ4h+z8G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T148B4D7346DEA213AF077AB7C86E03191D79EBBA36303D89D297212CA0763943DDD1539
sha3_384: b70efe1a752b37bf2d22e450cbfebece8bbd18d1653a601b660d8d2ae7c8b9975424c6e2c7172021b4a834554df82abe
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-02-18 15:04:09

Version Info:
Translation: 0x0009 0x04e4
Comments: Microsoft Corporation
CompanyName: AVAST Software
FileDescription: avast! Antivirus
FileVersion: 11.1.2253.1661
InternalName: AvastUi.exe
LegalCopyright: Copyright (c) 2014 AVAST Software
OriginalFilename: AvastUi.exe
ProductName: Avast Antivirus 
ProductVersion: 11.1.2253.1661
Assembly Version: 5.3.7.1

Malware.AI.4221885024 also known as:

How to remove Malware.AI.4221885024?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.