Malware

Malware.AI.4238272376 removal tips

Malware Removal

The Malware.AI.4238272376 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4238272376 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • A process attempted to delay the analysis task by a long amount of time.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Clears Windows events or logs
  • Attempts to interact with an Alternate Data Stream (ADS)

How to determine Malware.AI.4238272376?


File Info:

crc32: 0AC92095
md5: 89eb60ddbf6fa14aec4058c8a7d1aa02
name: 89EB60DDBF6FA14AEC4058C8A7D1AA02.mlw
sha1: 2a1c8dfd637d016b80bda984a441c9586da15c1d
sha256: ce8401e76edd4490d03ebdb83381ff6a658554c2765f40c26df4a7229f87b225
sha512: e88751e43e690b208f202fe79bf0ab0d3f5285ff15c2b62b633084c0eac14964c63e3287d8eec34ea80109ab29ccf48ec716897f4d95df01246bc9e7d2b8ddee
ssdeep: 3072:+a+S9WcFotJd0T2K+a11DyXUhRnu1V+ppSt4bF5gHngUnnESz9Ayog+tian2B+J2:pOgyXgnuXKSibF9A6yps2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4238272376 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00518a821 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Strictor.148673
CylanceUnsafe
ZillyaTrojan.Crusis.Win32.549
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Crusis.4c250a05
K7GWTrojan ( 00518a821 )
Cybereasonmalicious.dbf6fa
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.FYHF
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Crusis.ahk
BitDefenderGen:Variant.Strictor.148673
NANO-AntivirusTrojan.Win32.Crusis.etndgs
MicroWorld-eScanGen:Variant.Strictor.148673
TencentWin32.Trojan.Raas.Auto
Ad-AwareGen:Variant.Strictor.148673
SophosMal/Generic-S
ComodoMalware@#21k19u4jn5csb
BitDefenderThetaGen:NN.ZexaF.34608.sqW@aahj41ei
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.89eb60ddbf6fa14a
EmsisoftGen:Variant.Strictor.148673 (B)
SentinelOneStatic AI – Malicious PE
WebrootTrojan.Dropper.Gen
AviraHEUR/AGEN.1128643
eGambitUnsafe.AI_Score_72%
MicrosoftRansom:Win32/Wadhrama
ArcabitTrojan.Strictor.D244C1
AegisLabTrojan.Win32.Crusis.4!c
GDataGen:Variant.Strictor.148673
AhnLab-V3Win-Trojan/Sagecrypt.Gen
McAfeeArtemis!89EB60DDBF6F
MAXmalware (ai score=84)
VBA32Trojan-Ransom.Crusis
MalwarebytesMalware.AI.4238272376
PandaTrj/CI.A
RisingRansom.Wadhrama!8.E401 (CLOUD)
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.FXHW!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.CrySiS.HgIASOMA

How to remove Malware.AI.4238272376?

Malware.AI.4238272376 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment