Malware.AI.4271364384 removal tips

The Malware.AI.4271364384 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4271364384 virus can do?

Anomalous binary characteristics

How to determine Malware.AI.4271364384?


File Info:
crc32: 704A5F04
md5: cc66169a06336a1a2615eac4a9fa54be
name: CC66169A06336A1A2615EAC4A9FA54BE.mlw
sha1: 47da91ef058c7a40ab732c478dedc9ff246bc1f0
sha256: 662b0a4ef1e05cd2b26162cc5e762635bb4e1c66c41cb83ca7b5f60851e9831d
sha512: 851a558b86e93abed5d751ab9db40c93b3df26df2d4e57ca9e6a83c16a918c56b40fb8eae1d7cd10daa8ca63b6286202eeae18746d33a966d11a20101e002e03
ssdeep: 12288:c9dI5fKEpIV1Fn6OAVo1TKIX7p+04nSHzkxzDBTzX:yH65o1eI+LDxvB/
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: ImagingDevices.cpl
FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17763.1
FileDescription: Imaging Devices Control Panel
OriginalFilename: ImagingDevices.cpl
Translation: 0x0409 0x04b0

Malware.AI.4271364384 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Application.Ursu.166098
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.a06336
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.AAHR
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
ClamAV	Win.Trojan.Ag-18
BitDefender	Gen:Variant.Application.Ursu.166098
MicroWorld-eScan	Gen:Variant.Application.Ursu.166098
Ad-Aware	Gen:Variant.Application.Ursu.166098
Sophos	ML/PE-A
Comodo	TrojWare.Script.UMal.gymri@0
BitDefenderTheta	Gen:NN.ZemsilF.34670.Ym0@a0Sv2Aai
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Emsisoft	Gen:Variant.Application.Ursu.166098 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Kryptik.kuhds
eGambit	Unsafe.AI_Score_71%
Microsoft	Trojan:Win32/Tnega!ml
Arcabit	Trojan.Application.Ursu.D288D2
AegisLab	Trojan.Win32.Ursu.4!c
GData	Gen:Variant.Application.Ursu.166098
AhnLab-V3	PUP/Win.Generic.C4406762
McAfee	RDN/Generic.dx
MAX	malware (ai score=74)
Malwarebytes	Malware.AI.4271364384
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/CoinMiner.ZXL!tr
AVG	Win32:RATX-gen [Trj]
Qihoo-360	Win32/Trojan.Generic.HgIASSMA

How to remove Malware.AI.4271364384?

Malware.AI.4271364384 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X