Malware

How to remove “Malware.AI.4229692779”?

Malware Removal

The Malware.AI.4229692779 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4229692779 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.4229692779?


File Info:

name: A93CA9E6B9E56B452069.mlw
path: /opt/CAPEv2/storage/binaries/6ec29d3a699efc77f883f5ec1f773c33f25f172d5a03000c49421c394bc7de98
crc32: 48BA0348
md5: a93ca9e6b9e56b452069bcd014feb677
sha1: 2f0b0d42a13b87cac90a37e29a1912feb923ef63
sha256: 6ec29d3a699efc77f883f5ec1f773c33f25f172d5a03000c49421c394bc7de98
sha512: cef5884fccf4d15a96f132180a66f22eece2bc220b51255535a1eb0e125a4002b835f0dc64e048d4775d1675f65a3718d671069725549c8f6f757c3ce1154858
ssdeep: 6144:7FShv+C+e+GNLBRjAoH1bIQhJ7trkFShv+C+e+GNLBRRA+4tktj:7Fev7+0N1RUoVbn76Fev7+0N1Rqhkt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B1A47E0966EFB8D9D400F6F0CFC2C0BA8127ED790E5A317B2144BACB1A39C1556DB6B5
sha3_384: 7a2cf255e849da424e2d2e747e17e9ed0d92c03c6ef21ef8879d7834939d1289a89d680d9d5e002cb650badd44ce7144
ep_bytes: 6870144000e8eeffffff000000000000
timestamp: 2011-05-30 13:36:44

Version Info:

Comments: fkxudqPPrzM
CompanyName: tFFUZcTsHAkRU
FileDescription: superhacko0o
LegalCopyright: NinvlQ
ProductName: BkHrBH
FileVersion: 1.00
ProductVersion: 1.00
InternalName: superhacko0o
OriginalFilename: superhacko0o.exe
Translation: 0x0409 0x04b0

Malware.AI.4229692779 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
CAT-QuickHealTrojan.VB.Gen
SkyhighBehavesLike.Win32.VBObfus.gh
MalwarebytesMalware.AI.4229692779
SangforSuspicious.Win32.Save.vb
K7AntiVirusNetWorm ( 700000151 )
K7GWNetWorm ( 700000151 )
Cybereasonmalicious.2a13b8
BitDefenderThetaGen:NN.ZevbaF.36792.Dq0@aOYr93fi
VirITTrojan.Win32.VB.AYMZ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Bifrose
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Refroso-6998761-0
KasperskyTrojan.Win32.Refroso.ifuc
NANO-AntivirusTrojan.Win32.Refroso.fppebj
AvastWin32:GenMalicious-KJL [Trj]
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.VbCrypt.8
TrendMicroTROJ_BIFROS.SMI
FireEyeGeneric.mg.a93ca9e6b9e56b45
SophosMal/VBCheMan-A
SentinelOneStatic AI – Malicious PE
JiangminBackdoor/Bredolab.rmk
WebrootW32.Trojan.Bifrose.Gen
AviraTR/Dropper.Gen
Kingsoftmalware.kb.a.1000
MicrosoftTrojanDropper:Win32/Bifrose.F
ZoneAlarmTrojan.Win32.Refroso.ifuc
GDataWin32.Trojan.Agent.F2O6H1
VaristW32/Bifrost.Y.gen!Eldorado
AhnLab-V3Backdoor/Win32.Bredolab.R27254
Acronissuspicious
McAfeeGeneric VB.fq
VBA32Malware-Cryptor.VB.gen.1
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_BIFROS.SMI
RisingDropper.Bifrose!8.87C (TFE:3:jUaoOORhwbI)
YandexTrojan.GenAsa!2yuQytsKfG4
IkarusVirus.Win32.Heur
FortinetW32/VBKrypt.BBBQ!tr
AVGWin32:GenMalicious-KJL [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.4229692779?

Malware.AI.4229692779 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment