Malware

Malware.AI.4229622719 removal

Malware Removal

The Malware.AI.4229622719 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4229622719 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.4229622719?


File Info:

name: 44E64CAD3E3399B89172.mlw
path: /opt/CAPEv2/storage/binaries/ec86a4eb6c4326a02d8b142882271a663fcc1d3f44c534fec00230db4b1f1a68
crc32: 34EFAE16
md5: 44e64cad3e3399b891727132b912c07e
sha1: 8717bce276349fc3781312d22ba98e000f311c29
sha256: ec86a4eb6c4326a02d8b142882271a663fcc1d3f44c534fec00230db4b1f1a68
sha512: 7756f151d325085c9bf1872b82a6545c6e256e7b86516bcaf28464cdbeb01203ca250a0aba6a4d24b46886ae6264cdab684b12478bd09478eea2efb6a1ad564d
ssdeep: 24576:w5lB2hkhfvCpf2fTfkzdscND6CIkman1EsmMD:wl2hEvC4fTfkz+kjI7s5mMD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14C25AE6074D05A3AD1B66D3C8838BC70A2FD701315987648938E367B6FE6BB1D72924F
sha3_384: 2926be5e85e2104a7ffb0b6b33145e8d136fb72edb30e692171d39508056c94f491e3475924c7028e02ffec8403e4b43
ep_bytes: 605589e581ec08010000c745f40a0000
timestamp: 2016-12-13 17:04:16

Version Info:

0: [No Data]

Malware.AI.4229622719 also known as:

LionicVirus.Win32.Expiro.lVUO
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Expiro.Gen.3
FireEyeGeneric.mg.44e64cad3e3399b8
CAT-QuickHealW32.Expiro.L4
McAfeeW32/Expiro.gen.p
CylanceUnsafe
ZillyaVirus.Expiro.Win32.41
K7AntiVirusVirus ( 0040f4dc1 )
AlibabaVirus:Win32/Expiro.3548b6f0
K7GWVirus ( 0040f4dc1 )
Cybereasonmalicious.d3e339
BitDefenderThetaAI:FileInfector.6CBEB04B12
SymantecW32.Xpiro.F
ESET-NOD32a variant of Win32/Expiro.NBZ
APEXMalicious
Paloaltogeneric.ml
KasperskyVirus.Win32.Expiro.ar
BitDefenderWin32.Expiro.Gen.3
NANO-AntivirusVirus.Win32.Expiro.clnvwd
AvastWin32:Xpirat [Inf]
RisingVirus.Expiro!1.A140 (CLASSIC)
Ad-AwareWin32.Expiro.Gen.3
SophosMal/Generic-R + W32/Expiro-S
ComodoVirus.Win32.Expiro.SR@564eat
BaiduWin32.Virus.Expiro.c
VIPREVirus.Win32.Expiro.p (v)
TrendMicroPE_EXPIRO.AR
EmsisoftWin32.Expiro.Gen.3 (B)
SentinelOneStatic AI – Malicious PE
AviraW32/Expiro.NS
Antiy-AVLTrojan/Generic.ASVirus.C5
GridinsoftRansom.Win32.Gen.sa
GDataWin32.Expiro.Gen.3
CynetMalicious (score: 100)
AhnLab-V3Win32/Expiro5.Gen
Acronissuspicious
ALYacWin32.Expiro.Gen.3
MAXmalware (ai score=88)
VBA32BScope.Trojan.Vilsel
MalwarebytesMalware.AI.4229622719
TrendMicro-HouseCallPE_EXPIRO.AR
TencentVirus.Win32.Expiro.tt
IkarusVirus.Win32.Expiro
FortinetW32/Expiro.W
AVGWin32:Xpirat [Inf]
PandaW32/Expiro.O
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Malware.AI.4229622719?

Malware.AI.4229622719 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment