Malware

Malware.AI.4248163110 removal guide

Malware Removal

The Malware.AI.4248163110 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4248163110 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Malware.AI.4248163110?


File Info:

crc32: B7FCF90C
md5: a81a30a39d405b9b8448d547afd480ce
name: A81A30A39D405B9B8448D547AFD480CE.mlw
sha1: 4e4236ae0f5e48b8c18156b3e84dbffa2230a7a9
sha256: 9a412c1c1965901b90ac3173e61d139df5008b5bd23e2a44e4214ff663eb27bc
sha512: 97d84bfba3fd22370bd5cadf9c08d42872000ddf0dc903158f913a88196f0ea92887b2e9fcbf7488e231f1bcb2af3d8846831705a0d68f3db8d4999e99739138
ssdeep: 6144:m0mwXSJGI8hrX/ijpsI2XGswPKY24kDrwZ9TCwfhSiRYVdmdmGYvrF3+PK79:EwXAwhbMpsIziVyowfE4yumnFB
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: ehSched.exe
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Windows Media Center Scheduler Service
OriginalFilename: ehSched.exe
Translation: 0x0409 0x04b0

Malware.AI.4248163110 also known as:

K7AntiVirusVirus ( 00535e4a1 )
Elasticmalicious (high confidence)
ALYacWin64.Expiro.Gen.6
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderWin64.Expiro.Gen.6
K7GWVirus ( 00535e4a1 )
Cybereasonmalicious.39d405
CyrenW64/Expiro.R.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Expiro.CO
APEXMalicious
CynetMalicious (score: 100)
NANO-AntivirusVirus.Win64.Expiro.clnvwd
MicroWorld-eScanWin64.Expiro.Gen.6
Ad-AwareWin64.Expiro.Gen.6
SophosML/PE-A + W64/Expiro-AV
TrendMicroVirus.Win64.EXPIRO.MR
McAfee-GW-EditionBehavesLike.Win64.Ransomware.hc
FireEyeGeneric.mg.a81a30a39d405b9b
EmsisoftWin64.Expiro.Gen.6 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Bingoml.avt
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASVirus.307
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin64.Expiro.Gen.6
Acronissuspicious
McAfeeArtemis!A81A30A39D40
MAXmalware (ai score=82)
MalwarebytesMalware.AI.4248163110
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
IkarusVirus.Win64.Expiro
MaxSecureTrojan.Malware.121218.susgen
FortinetW64/Expiro.CE

How to remove Malware.AI.4248163110?

Malware.AI.4248163110 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment