Malware

Malware.AI.4250748779 removal instruction

Malware Removal

The Malware.AI.4250748779 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4250748779 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.4250748779?


File Info:

name: A7F3050B59FB4056A036.mlw
path: /opt/CAPEv2/storage/binaries/d5157cb34dd07d6748185736ad0491bfbabc914d8982fc2ee6a1f75ed555e216
crc32: BFB858AC
md5: a7f3050b59fb4056a036177bb624dabb
sha1: a460cabc80194fd6974929b43ed3356b79b50262
sha256: d5157cb34dd07d6748185736ad0491bfbabc914d8982fc2ee6a1f75ed555e216
sha512: 9e105b874663e09fd1106b584fbd0b777c38b8514f4356f03e1d4a7afbda8372b9613855f54e77ad0a5f3f2420b86a7ceb5e080b2981bc0704d3ef2c55bde2e5
ssdeep: 12288:vXlXyGcCS5BloTeM5UsaULt2cjMnudFBEsvo1ED34GchNXLUgzOx:/lXyFBloTeM5j9kWFR5chxnzO
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T14CD44B5BF40DB748EA2C60334BA106CB41CA14399B629F37C722D979736260BBD585BF
sha3_384: b0bf9dcf4ebcf418d8af61e96a669cf2994df06e7a0356b85c6d34381ef76c37443b9e1e5a9a7e0e494bbdd017348ac4
ep_bytes: 90554889e55648ffce57415441554156
timestamp: 2008-11-08 16:22:40

Version Info:

CompanyName: Microsoft Corporation
FileDescription: SNMP Trap
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
InternalName: snmptrap.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: snmptrap.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.17134.1
Translation: 0x0409 0x04b0

Malware.AI.4250748779 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.a7f3050b59fb4056
McAfeeW64/Expiro.a
CylanceUnsafe
ZillyaVirus.Expiro.Win64.34
K7AntiVirusVirus ( 0040f8071 )
K7GWVirus ( 0040f8071 )
Cybereasonmalicious.b59fb4
BaiduWin64.Virus.Expiro.r
CyrenW64/Expiro.D!gen
SymantecW64.Xpiro.F
ESET-NOD32Win64/Expiro.AG
APEXMalicious
KasperskyVirus.Win64.Expiro.g
BitDefenderWin64.Expiro.Gen.3
NANO-AntivirusVirus.Win64.Expiro.dtfhve
MicroWorld-eScanWin64.Expiro.Gen.3
AvastWin32:Expiro-DD
TencentVirus.Win64.Expiro.ad
Ad-AwareWin64.Expiro.Gen.3
SophosML/PE-A + W64/Expiro-S
DrWebWin64.Expiro.108
VIPREVirus.Win64.Expiro.gen.a (v)
TrendMicroPE64_EXPIRO.AR
McAfee-GW-EditionBehavesLike.Win64.Expiro.hc
EmsisoftWin64.Expiro.Gen.3 (B)
IkarusVirus.Win32.Expiro
GDataWin64.Expiro.Gen.3
MaxSecurevirus.win64.expiro.gen
AviraW64/Expiro.AF
Antiy-AVLTrojan/Generic.ASVirus.311
ArcabitWin64.Expiro.Gen.3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
TACHYONVirus/W64.Expiro.C
AhnLab-V3Win64/Expiro2.Gen
Acronissuspicious
ALYacWin64.Expiro.Gen.3
MAXmalware (ai score=83)
MalwarebytesMalware.AI.4250748779
TrendMicro-HouseCallPE64_EXPIRO.AR
RisingVirus.Expiro!1.A140 (CLASSIC)
SentinelOneStatic AI – Malicious PE
FortinetW64/Expiro.Q
AVGWin32:Expiro-DD
PandaW32/Expiro.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Malware.AI.4250748779?

Malware.AI.4250748779 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment