Malware

Malware.AI.4273980335 information

Malware Removal

The Malware.AI.4273980335 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4273980335 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid

How to determine Malware.AI.4273980335?


File Info:

name: 7BB6B5F9121A5F3729E3.mlw
path: /opt/CAPEv2/storage/binaries/3e3f0cf56fce49f4c05e02a543d96dce616d344680ea355f20a1fb173830a2d3
crc32: AD6DEAB4
md5: 7bb6b5f9121a5f3729e33cfdc7767f44
sha1: 9981d79fb54b09e8c5f0f1fee1138a1869699477
sha256: 3e3f0cf56fce49f4c05e02a543d96dce616d344680ea355f20a1fb173830a2d3
sha512: a0e3e2e8ee57820cb3fd17676be9dd6e92aff2876eda4fb8d15a7d470dbc5d56378a766693d11c111e4ad6bab6e19eb97919e375e07c8dd651b9e8e7162db985
ssdeep: 49152:wIOuGuneoyCb6CwG6O4qofllYbG8WXbvhHqnYW:VouecL6O4qgllMGLXtHqnY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12385330B6E9EBF0EE13AD97E1C30D9342AB066845D358FEC5134C51E7E6170C6D81ACA
sha3_384: 99bea25a2682cbe1c15ba5b3ab15aee4eda7a6ddc85fa34c92d8c7c4e7f7be5c62d73c7e9ebc3927cac76d6726b33ec3
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2019-06-13 11:24:39

Version Info:

CompanyName: Home of Gamehacking
FileVersion: 1.0.0.0
LegalCopyright: iNvIcTUs oRCuS
OriginalFilename: tqv260dx11+tr17.exe
ProductVersion: 1.0.0.0
ProgramID: com.embarcadero.Project1
FileDescription: Titan Quest - Anniversary Edition v2.6.0 DirectX 11 +17 Trainer
ProductName: Project1
Translation: 0x0409 0x04e4

Malware.AI.4273980335 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.41391706
FireEyeGeneric.mg.7bb6b5f9121a5f37
McAfeeArtemis!7BB6B5F9121A
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.9121a5
CyrenW32/GameHack.AV.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
BitDefenderTrojan.GenericKD.41391706
EmsisoftTrojan.GenericKD.41391706 (B)
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
SophosGameHack (PUA)
WebrootW32.Trojan.Gen
MicrosoftTrojan:Win32/Sabsik!ml
GDataTrojan.GenericKD.41391706
BitDefenderThetaGen:NN.ZelphiF.34182.VnuaaqX5J!di
ALYacTrojan.GenericKD.41391706
MalwarebytesMalware.AI.4273980335
TrendMicro-HouseCallTROJ_GEN.R002H09K521
MaxSecureTrojan.Malware.74483878.susgen

How to remove Malware.AI.4273980335?

Malware.AI.4273980335 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment