Malware

How to remove “Malware.AI.4245135936”?

Malware Removal

The Malware.AI.4245135936 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4245135936 virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.4245135936?


File Info:

name: 335A47E24A2526EB3175.mlw
path: /opt/CAPEv2/storage/binaries/c859e240e3b9b18f3128ba325531e0b1b34fcf9748b3a32f8d395b9c725a3500
crc32: 6BDAFD81
md5: 335a47e24a2526eb317547bd55b1d449
sha1: 1352364b80e940f42afbba40e7f7e276b28bb04e
sha256: c859e240e3b9b18f3128ba325531e0b1b34fcf9748b3a32f8d395b9c725a3500
sha512: 7f1a5731f366c65336f819567f0acba81f46f113a0143f81cba8a8ee6cca1127e69a8c9f2c53930faacfaaa491e3b7a8714931abf5b12801b641f9efa290e028
ssdeep: 98304:5RNVtmdvvvv2bL7JLUryhauxSpTNznJTb5xIXtt/8LS:5LrmxvnyLNUOHKBZ3G3ULS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14636336D0B653469E11B10BFCFD5A03BE36EB73C93391F7B4F2226364EA511A5AB4810
sha3_384: 6da67e201990a7c3f9b21009c9fe3ba1b0af887d24b8893d3de7778e80d9eae6d227ac1ca1a343c0237fadacd01ceee6
ep_bytes: eb0800502a000000000060e800000000
timestamp: 2012-06-26 10:32:30

Version Info:

Comments:
CompanyName: 金山软件股份有限公司
FileDescription: JxOnline Client
FileVersion: 3, 0, 0, 6
InternalName: Game
LegalCopyright: 版权所有 (C) 1995-2004 金山软件股份有限公司
LegalTrademarks:
OLESelfRegister:
OriginalFilename: Game.exe
PrivateBuild:
ProductName: SwordOnline
ProductVersion: 3.00.00.2003
SpecialBuild:
Translation: 0x0804 0x04b0

Malware.AI.4245135936 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
FireEyeGeneric.mg.335a47e24a2526eb
McAfeeGenericRXGB-QS!335A47E24A25
CylanceUnsafe
K7AntiVirusTrojan ( 005203381 )
K7GWTrojan ( 005203381 )
BitDefenderThetaGen:NN.ZexaF.34182.@J0@aSp946ij
SymantecML.Attribute.HighConfidence
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Dropper.rc
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1231100
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
VBA32Trojan.Agent
MalwarebytesMalware.AI.4245135936
APEXMalicious
RisingMalware.Heuristic!ET#90% (RDMK:cmRtazrK5rPkb8JKbFW1H6C/B0F9)
YandexTrojan.GenAsa!skNEEdTYEcE
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.4245135936?

Malware.AI.4245135936 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment