What is “Malware.AI.4266906183”?

The Malware.AI.4266906183 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4266906183 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Anomalous binary characteristics

How to determine Malware.AI.4266906183?


File Info:
crc32: 510D8D68
md5: 3db8aaeede991e343f4a58c029d5bcb6
name: 3DB8AAEEDE991E343F4A58C029D5BCB6.mlw
sha1: dce0cf75d9080b4c31425adbc899d21f0ebb5c0f
sha256: 9bf4c9b6c5e930ce91b84920a73d9111793e6d31477458043e94b649147ebf71
sha512: ae2e99816106a935498f977bf31dd995d315dcdb0237904bce86ccc525732d4b5353376818af87337396370e0cc23ebd321b4ecf1cb30c04969ea0a20ff8df31
ssdeep: 24576:XxK+gqdVuAceA3ccBLTNglDRGFSA2po/CpSydh:hK+gqaGAMcBLTNKDscDpUoSydh
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: Copyright xa9 Alexander Roshal 1993-2018
InternalName: WinRAR
FileVersion: 5.60.0
CompanyName: Alexander Roshal
ProductName: WinRAR
ProductVersion: 5.60.0
FileDescription: WinRAR archiver
OriginalFilename: WinRAR.exe
Translation: 0x0409 0x04e4

Malware.AI.4266906183 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Ser.Bulz.804
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Ser.Bulz.804
ESET-NOD32	a variant of Win32/Packed.NSISmod.AY suspicious
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Ser.Bulz.804
Ad-Aware	Gen:Variant.Ser.Bulz.804
McAfee-GW-Edition	BehavesLike.Win32.Browser.tc
FireEye	Generic.mg.3db8aaeede991e34
Emsisoft	Gen:Variant.Ser.Bulz.804 (B)
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
Arcabit	Trojan.Ser.Bulz.804
GData	Gen:Variant.Ser.Bulz.804
MAX	malware (ai score=83)
Malwarebytes	Malware.AI.4266906183
Rising	Trojan.HiddenRun/NSIS!1.D9A8 (CLASSIC)

How to remove Malware.AI.4266906183?

Malware.AI.4266906183 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X