Malware

Malware.AI.4226482299 removal

Malware Removal

The Malware.AI.4226482299 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4226482299 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.4226482299?


File Info:

name: 260BD3E904C04EDD76A3.mlw
path: /opt/CAPEv2/storage/binaries/ea2c747a8c647ddfce607cd79310422e7368a3d4699dc58cfe5a68d506c81a16
crc32: FA629A1A
md5: 260bd3e904c04edd76a32bd6544806f1
sha1: bcb151ab9c8a3db66e2c062c6c73669f146a12fc
sha256: ea2c747a8c647ddfce607cd79310422e7368a3d4699dc58cfe5a68d506c81a16
sha512: 2ef41cc214f56cb6fae033864fab5babf27e429d821c1f8a66775523c1bfc266abef5e7cbd4fd3cc481db7d2a7c84aff17a597565b144d68227859bcc3d0b2cd
ssdeep: 24576:ReE2ACOwXkRJ0wnOJ7XIg4d/MS2J0wnOJ7Z:ReEnCOwXkRJ0wnONYg6US2J0wnONZ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AD0501DFB4D12DFAD8E54ABC49891C982359D693B9C41F8589C47A0C80A97F30CCDE9E
sha3_384: dec387a396d2eabd1d0689b8f52c423e3730ee01af2e6f68c9f0931464abd32fc90d7ea3a21e5086bad4d6490256a865
ep_bytes: b843d3892783ec04c70424d885400081
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Malware.AI.4226482299 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.260bd3e904c04edd
ALYacGen:Variant.Razy.870640
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.904c04
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
ClamAVWin.Malware.Razy-9918352-0
KasperskyTrojan.Win32.Copak.lbwo
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentMalware.Win32.Gencirc.10cfce72
Ad-AwareGen:Variant.Razy.870640
EmsisoftGen:Variant.Razy.870640 (B)
DrWebTrojan.Siggen14.7487
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
SophosTroj/Agent-BGOS
GDataGen:Variant.Razy.870640
JiangminTrojan.Copak.blop
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_97%
Antiy-AVLTrojan/Generic.ASMalwS.33964FA
ArcabitTrojan.Razy.DD48F0
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
Acronissuspicious
McAfeeGlupteba-FTSD!260BD3E904C0
MAXmalware (ai score=83)
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.4226482299
RisingTrojan.Injector!1.CD26 (RDMK:cmRtazpeHhXi8t1zC2ukLdwJY5mz)
YandexTrojan.Copak!eE6Qay008oc
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenKryptik.CTNW!tr
BitDefenderThetaGen:NN.ZexaF.34114.YuZ@aOhSZ5
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.4226482299?

Malware.AI.4226482299 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment