Malware

Malware.AI.4222468549 removal guide

Malware Removal

The Malware.AI.4222468549 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4222468549 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (3 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings

Related domains:

clients-amazonworkspaces.com
apps.identrust.com

How to determine Malware.AI.4222468549?


File Info:

crc32: DE7472E7
md5: 9baebf2c5e90029dafa9222e7f3e6eaa
name: 9BAEBF2C5E90029DAFA9222E7F3E6EAA.mlw
sha1: 9d98ef25f7466426dcbbb4bb47da2c9b443ec318
sha256: 91dbe3723d91c64eaa829ff9a2dfe976ba43417692afd4dc39141c4bfbca8363
sha512: 29809fb887f339e2e2824c2de05de2845ed95dd1c05bde25a8430d7ac118a06e14f1466a4bbd9fc0761efb251a6fcd6e5acf35ccde789e9e72f846dd5825fe35
ssdeep: 24576:htdAm9DUi/CR3wCkpgn8GHkbEXXeG/jFt5qUTxyDx:/qTyWk6ek1te
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 51.1052.0.0
FileDescription: Setup/Uninstall
Translation: 0x0000 0x04b0

Malware.AI.4222468549 also known as:

K7AntiVirusRiskware ( 0040eff71 )
ALYacTrojan.GenericKD.36871921
SangforTrojan.Win64.Shelma.kgc
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKD.36871921
K7GWRiskware ( 0040eff71 )
SymantecRansom.Wannacry
ESET-NOD32a variant of Generik.NXCJWB
KasperskyTrojan.Win64.Shelma.kgc
AlibabaTrojan:Win64/Shelma.6cb81a21
MicroWorld-eScanTrojan.GenericKD.36871921
Ad-AwareTrojan.GenericKD.36871921
SophosMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.36871921
EmsisoftTrojan.GenericKD.36871921 (B)
AviraTR/AD.CobaltStrike.uvzup
eGambitPE.Heur.InvalidSig
MicrosoftProgram:Win32/Uwamson.A!ml
AegisLabTrojan.Win64.Shelma.4!c
GDataTrojan.GenericKD.36871921
McAfeeArtemis!9BAEBF2C5E90
MAXmalware (ai score=82)
MalwarebytesMalware.AI.4222468549
TrendMicro-HouseCallTROJ_GEN.R002H0CEC21
RisingTrojan.Shelma!8.1A3D (CLOUD)
YandexTrojan.Shelma!r+eMCNiLdQo
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.117728234.susgen
FortinetW64/Shelma.KGC!tr

How to remove Malware.AI.4222468549?

Malware.AI.4222468549 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment