Malware

Malware.AI.4245771341 information

Malware Removal

The Malware.AI.4245771341 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4245771341 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Dynamic (imported) function loading detected
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.4245771341?


File Info:

name: B80E75E5890DD7B5B6ED.mlw
path: /opt/CAPEv2/storage/binaries/82c8421e9fdcbea9ce0829790df190dbaab64c154e122ea746d2670fa0d65458
crc32: E1D6DFB4
md5: b80e75e5890dd7b5b6edde807f162939
sha1: abf49d332dd53668c5c1cf2069e1a0198f080c94
sha256: 82c8421e9fdcbea9ce0829790df190dbaab64c154e122ea746d2670fa0d65458
sha512: f72cd0f439d7ce79a9958bf902b6643e42db86b970f9a0973a69c3d70e7f7d94b77d457f11b19317aed0dfc200a57614417e7bfcc5d59c2af5aad5c4519620e2
ssdeep: 1536:gsTt+DFacK/39M+J/zOTYSCct4+XMdPE6Z:9t+scK1D/zOTY/ct4+8NX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A836EAAE4578E23E84885710191F6532FF7EA9BC676C1835FC4C87EC52234211BF75A
sha3_384: 38b7a3cff561620274eaa5f231fab6f16c9100d120a35730f55bb70b281a7926ba74bf4198546ea2d403e91dafe898dd
ep_bytes: 558bec6aff6888b240006880a9400064
timestamp: 2014-09-22 21:16:43

Version Info:

CompanyName: XGI Technology, Inc.
ProductName: OHW812L36cX
Translation: 0x0409 0x03b6

Malware.AI.4245771341 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad3.32784
MicroWorld-eScanTrojan.GenericKD.43623449
FireEyeGeneric.mg.b80e75e5890dd7b5
CAT-QuickHealTrojan.IGENERIC
ALYacTrojan.GenericKD.43623449
CylanceUnsafe
ZillyaDownloader.Small.Win32.74079
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0001140e1 )
AlibabaMalware:Win32/km_24df.None
K7GWTrojan ( 0001140e1 )
Cybereasonmalicious.5890dd
BitDefenderThetaGen:NN.ZexaF.34084.fq0@a48B75lk
CyrenW32/Trojan.LZNS-8753
SymantecPacked.Generic.497
ESET-NOD32a variant of Win32/Kryptik.CLVM
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.GenericKD.43623449
NANO-AntivirusTrojan.Win32.DownLoad3.dflnsb
AvastWin32:Trojan-gen
TencentWin32.Trojan.Generic.Pdmc
Ad-AwareTrojan.GenericKD.43623449
EmsisoftTrojan.GenericKD.43623449 (B)
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroTROJ_GEN.R002C0PL321
McAfee-GW-EditionPWSZbot-FADF!B80E75E5890D
SophosML/PE-A + Troj/Agent-AJAY
IkarusTrojan-Downloader.Win32.Lerspeng
JiangminTrojanSpy.Zbot.egmn
AviraHEUR/AGEN.1140301
Antiy-AVLTrojan/Generic.ASMalwS.C09DDA
GridinsoftRansom.Win32.Zbot.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ViRobotTrojan.Win32.Z.Zbot.86016.AK
GDataTrojan.GenericKD.43623449
CynetMalicious (score: 99)
AhnLab-V3HEUR/UnSec.X1469
Acronissuspicious
McAfeePWSZbot-FADF!B80E75E5890D
MAXmalware (ai score=86)
VBA32TrojanSpy.Zbot
MalwarebytesMalware.AI.4245771341
TrendMicro-HouseCallTROJ_GEN.R002C0PL321
RisingMalware.FakePDF/ICON!1.9C3A (CLASSIC)
YandexTrojan.DL.Small!2ugOcAu9KeA
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Yakes.GAKM!tr
AVGWin32:Trojan-gen

How to remove Malware.AI.4245771341?

Malware.AI.4245771341 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment