Malware

What is “Malware.AI.4242207394”?

Malware Removal

The Malware.AI.4242207394 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4242207394 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid

How to determine Malware.AI.4242207394?


File Info:

name: D3CCF539802B4E1B47EB.mlw
path: /opt/CAPEv2/storage/binaries/a843547a0b57f29cca29304a1615203ae90ef3cf882c6259d01aa6db7e541af8
crc32: 012DA9A6
md5: d3ccf539802b4e1b47eb2bb8d3466251
sha1: db495cd238632a56809da79fe9e356034d7c12bf
sha256: a843547a0b57f29cca29304a1615203ae90ef3cf882c6259d01aa6db7e541af8
sha512: e5655301b99bf2826c707b458cace5f336864a65ef3031109efa84d18fb06e696604a19670126a58d7c09fc8b3328e5c42efd3f461235a19a4e9175ca8453dcd
ssdeep: 12288:4XRoSQkFeGBesQz2bDWjo2eM8JZZXI5HjY/gXQ9++a/0rCc6Gg1fD3ycW7dnQcoR:aRoSQRG62Wjxi9IG/5nClGgxmcWRnoX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B115F0018B48CC06C66582BB85464A374230FD797722DEB45E84BDEBBF726AED857133
sha3_384: abbd6c9ce6ff44f72ba13f6e1ccf6fbd1fac03bdcdb5d4084f64b5ee79abc2cc943ac9e8a23c12287567e6e733b04c41
ep_bytes: 60e80000000058059f0200008b3003f0
timestamp: 2021-12-09 02:58:55

Version Info:

Comments:
CompanyName: YT Applications
FileDescription: YT Downloader
FileVersion: 7, 9, 6, 0
InternalName: YT Downloader
LegalCopyright: (C) YT Applications. All rights reserved.
LegalTrademarks:
OriginalFilename: YTDownloader.EXE
PrivateBuild:
ProductName: YT Downloader
ProductVersion: 7, 9, 6, 0
SpecialBuild:
Translation: 0x0409 0x04b0

Malware.AI.4242207394 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Vtflooder.lnTD
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Midie.103815
FireEyeGeneric.mg.d3ccf539802b4e1b
McAfeeRDN/Generic.grp
CylanceUnsafe
SangforTrojan.Win32.Sabsik.FL
SymantecML.Attribute.HighConfidence
APEXMalicious
BitDefenderGen:Variant.Midie.103815
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Midie.103815
TrendMicroTROJ_GEN.R002C0PLH21
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftGen:Variant.Midie.103815 (B)
GDataGen:Variant.Midie.103815
WebrootPua.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Generic.ASMalwS.34EC616
GridinsoftRansom.Win32.Zbot.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Generic.R458125
BitDefenderThetaGen:NN.ZexaF.34114.5m0@a4ED9lni
ALYacGen:Variant.Midie.103815
VBA32BScope.Trojan.Sabsik.FL
MalwarebytesMalware.AI.4242207394
TrendMicro-HouseCallTROJ_GEN.R002C0PLH21
RisingMalware.Heuristic!ET#82% (RDMK:cmRtazph8wtiMI4QiWOtCczgq+wx)
eGambitUnsafe.AI_Score_99%
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
PandaTrj/CI.A

How to remove Malware.AI.4242207394?

Malware.AI.4242207394 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment