Malware

Malware.AI.4228302720 removal instruction

Malware Removal

The Malware.AI.4228302720 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4228302720 virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4228302720?


File Info:

name: 67832D1C2988CCDF0DDD.mlw
path: /opt/CAPEv2/storage/binaries/5d473b1d4a8995140816e024e4c98cfcc62e25e420c808e2b5d59dff06d6a89c
crc32: FC60FCB9
md5: 67832d1c2988ccdf0ddd3ccadca85b7f
sha1: 8b48a26a2163a03cb19b633160f42e06ab08974a
sha256: 5d473b1d4a8995140816e024e4c98cfcc62e25e420c808e2b5d59dff06d6a89c
sha512: e3f94836d6f2567e134d837d16edb56af80fdc5b486020a82b12ca588a1488a0d0077c55303ce8a40d026aff72c6716e1784d17a4416b376cd802a2c6722f6e2
ssdeep: 12288:HeTDvLGYW3jU7z/gG0hU2bCgqMTwefe6+5I:HePzG336ENhNdq/9J5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T171B42332CBD0EE1ED3C2AF7F4826653681E52E405C270253FAA854E6FA76D592A01DC2
sha3_384: 609b88d98a5efee46fcca45e7513927bffd49a873c8cb8432737976810ec0bc068d2091c280d693690779a5cb4235119
ep_bytes: 60be001064008dbe0000dcff5783cdff
timestamp: 2020-12-08 11:18:38

Version Info:

FileVersion: 1.2.3.4
ProductVersion: 1.0.0.0
OriginalFilename: Camelot.exe
InternalName: Camelot.exe
FileDescription: Camelot
CompanyName: Menge
LegalCopyright: Copyright (c) 2009
ProductName:
Translation: 0x0000 0x04b0

Malware.AI.4228302720 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Fugrafa.4!c
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.GenericKD.67382294
FireEyeTrojan.GenericKD.67382294
SkyhighGenericRXQL-ZT!62C45F416BA4
ALYacTrojan.GenericKD.67382294
MalwarebytesMalware.AI.4228302720
SangforTrojan.Win32.Agent.Vquq
BitDefenderTrojan.GenericKD.67382294
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 99)
AlibabaTrojan:Win32/Injector.03adf73f
RisingTrojan.Crypto!8.364 (CLOUD)
EmsisoftTrojan.GenericKD.67382294 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen3
VIPRETrojan.GenericKD.67382294
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
IkarusTrojan.Injector
WebrootW32.Malware.Gen
AviraTR/Crypt.XPACK.Gen3
Antiy-AVLTrojan/Win32.SGeneric
Kingsoftmalware.kb.b.896
MicrosoftProgram:Win32/Ymacco.AA5D
ArcabitTrojan.Generic.D4042C16
GDataTrojan.GenericKD.67382294
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C4423383
McAfeeArtemis!67832D1C2988
MAXmalware (ai score=86)
DeepInstinctMALICIOUS
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06EG23
SentinelOneStatic AI – Suspicious PE
FortinetW32/PossibleThreat
BitDefenderThetaGen:NN.ZexaF.36792.FmKfaqvk!vac

How to remove Malware.AI.4228302720?

Malware.AI.4228302720 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment