Should I remove “Malware.AI.4226077588”?

The Malware.AI.4226077588 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4226077588 virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.4226077588?


File Info:
crc32: 43E91110
md5: fa391cc5aec0050ba74f01ccc2e86aa6
name: FA391CC5AEC0050BA74F01CCC2E86AA6.mlw
sha1: c7319213d60893594c501f6659cb865462d04447
sha256: 2306c27e5934454abceb987ac5cbde244bb6051120ba044d74373e8fe4da84a4
sha512: 509001400b4daaa7db2ffc5c7ba8b1ee7370f6becef74580b8b4bcf9e8bd25b3ef13819627526c7469045e0a9e15192a861a082aa8f54d6cf04878c1f1573fee
ssdeep: 6144:j1VUPDQCM57HCJA9TfgyktfLWagKrgGP5WzwHq3BgEF/928W0FsUva:R8MrpgvWKgGIzwHwhV2lyVva
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2019xa9
Website: http://usbtor.ru/viewtopic.php?t=1415
InternalName: WLU_x86.exe
FileVersion: 1.3.0.3802
CompanyName: CryptoNick Softx2122
ProductName: Windows Login Unlocker
ProductVersion: 1.3.0.3802
FileDescription: Windows Login Unlocker
Email: CryptoNickSoft@gmail.com
OriginalFilename: WLU_x86.exe
Translation: 0x0000 0x04b0

Malware.AI.4226077588 also known as:

Lionic	Trojan.Win32.Ursu.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Ursu.380337
Cylance	Unsafe
Sangfor	Trojan.Win32.Occamy.AA
Cybereason	malicious.5aec00
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Ursu.380337
MicroWorld-eScan	Gen:Variant.Ursu.380337
Ad-Aware	Gen:Variant.Ursu.380337
Sophos	Generic PUA MH (PUA)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OJJ21
McAfee-GW-Edition	GenericRXHA-IH!FA391CC5AEC0
FireEye	Gen:Variant.Ursu.380337
Emsisoft	Gen:Variant.Ursu.380337 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Hacktool.Windowsloginunlock
Arcabit	Trojan.Ursu.D5CDB1
GData	Gen:Variant.Ursu.380337
AhnLab-V3	Malware/Win.Generic.R446179
McAfee	GenericRXHA-IH!FA391CC5AEC0
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.4226077588
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0OJJ21
MaxSecure	Trojan.Malware.74408340.susgen
Fortinet	W32/GenericRXHA.IH!tr
AVG	Win32:Malware-gen

How to remove Malware.AI.4226077588?

Malware.AI.4226077588 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X