Malware

How to remove “Malware.AI.4240971468”?

Malware Removal

The Malware.AI.4240971468 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4240971468 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • NtSetInformationThread: attempt to hide thread from debugger
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Enumerates the modules from a process (may be used to locate base addresses in process injection)
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Created a process from a suspicious location
  • Harvests cookies for information gathering

How to determine Malware.AI.4240971468?


File Info:

name: 35AE29573894A10EC170.mlw
path: /opt/CAPEv2/storage/binaries/cd716a11679b98b42382e72283c0fa785d8a4b041bee8044a2c7dffae2142446
crc32: 175BE35F
md5: 35ae29573894a10ec1702014333cf2f5
sha1: 9aa58433d3986c33b89e8e0707c64e093a4938ac
sha256: cd716a11679b98b42382e72283c0fa785d8a4b041bee8044a2c7dffae2142446
sha512: 5d7c0729b5909782568d286e6d7d28496f2cf1b416cf3f1ad6bdf86f38e295eaa6f10ccb1f0224f958700f5bdd12fc3aebd1de1f0faf94a8d068c4bb24c381b1
ssdeep: 196608:UliwYryZ1rD5xSePS6S83xZ0yW3oD9ebH3DMbl5pb6SLPx02rNlS+yj6Yi4kM9:wLZ1rDPN6jix+3oEbH3DQ/O0W2rNlq6o
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169963331EA85CDB0E99229741835D805B17FAE301718CA5F37CC74A849F77C1A7E8E9A
sha3_384: be29fa0031a7c8c1cef13992da6a00259501bb272d15a49097fbcddc68ef2c1e5e01c5f269afa638b7dbd92919916303
ep_bytes: e864040000e988feffff3b0d68e64300
timestamp: 2021-06-11 09:16:47

Version Info:

0: [No Data]

Malware.AI.4240971468 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.NanoBot.trQD
Elasticmalicious (high confidence)
DrWebTrojan.Siggen16.22396
MicroWorld-eScanTrojan.GenericKD.38421419
FireEyeGeneric.mg.35ae29573894a10e
McAfeeArtemis!35AE29573894
CylanceUnsafe
SangforRiskware.Win32.Agent.ky
K7AntiVirusTrojan ( 0056e5201 )
AlibabaTrojan:Win32/runner.ali1000123
K7GWTrojan ( 0056e5201 )
BitDefenderThetaGen:NN.ZemsilF.34160.7m2@aaSijKl
CyrenW64/Enigma.B.gen!Eldorado
ESET-NOD32multiple detections
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.GenericKD.38421419
AvastWin64:Evo-gen [Susp]
TencentWin32.Trojan.Multiple.Lkoc
Ad-AwareTrojan.GenericKD.38421419
SophosMal/Generic-S
ComodoMalware@#gxsb9c05dxiu
TrendMicroTROJ_FRS.VSNTA322
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
EmsisoftTrojan.GenericKD.38421419 (B)
SentinelOneStatic AI – Malicious SFX
GDataTrojan.GenericKD.38421419
AviraTR/Redcap.iqcql
KingsoftWin32.Troj.Undef.(kcloud)
GridinsoftTrojan.Win64.Packed.vb
ArcabitTrojan.Generic.D24A43AB
ViRobotTrojan.Win32.Z.Agent.9403634
MicrosoftTrojan:Win32/Mamson.A!ac
CynetMalicious (score: 100)
VBA32Trojan.Sabsik.FL
ALYacTrojan.GenericKD.38421419
MAXmalware (ai score=88)
MalwarebytesMalware.AI.4240971468
TrendMicro-HouseCallTROJ_GEN.R002H0DLT21
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL:53L+YtIARSbJfYJx661FcQ)
IkarusTrojan.Win64.Enigma
FortinetPossibleThreat.PALLAS.H
AVGWin64:Evo-gen [Susp]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.1728101.susgen

How to remove Malware.AI.4240971468?

Malware.AI.4240971468 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment