Malware

About “Malware.AI.4274092519” infection

Malware Removal

The Malware.AI.4274092519 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4274092519 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.4274092519?


File Info:

name: 3478F28D0BF77C370C7A.mlw
path: /opt/CAPEv2/storage/binaries/4fbb11bf88484fd90c625d5e8e632ef2641027e71417e2653b6fabf8342a2710
crc32: 72C92AE8
md5: 3478f28d0bf77c370c7aeef2bde76dc7
sha1: 55b84c9d34b3ba7631f463edb71d9a7fb6a4f446
sha256: 4fbb11bf88484fd90c625d5e8e632ef2641027e71417e2653b6fabf8342a2710
sha512: 486c8792ce42f3555c83d93807bf1a7ea744e4d5e0cd8ad2c2007af0ad027e3ca8393c2b3bf5915ea5946de80c48ce62ab9b904450c56ded84ebd445700c9fc0
ssdeep: 24576:Qy2A6Ua4iYSBEzv/1nLb2yPK+QODIizjoPQp:FTxzv1LTYw8u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1892512526A74C437F3B441B47A2796341DBB7E201C754012B9BE3ACEAB36B61B84B317
sha3_384: bcbc93baab44350dc1717db631eb1de6460b05a5a3a8ca8372689b10fcde6da8efc8b7a2fb7fa6134d37a0a46c37c0ac
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: 乐娱盒子
FileDescription: 乐娱盒子安装程序
FileVersion: 1.0.3.9
LegalCopyright:
ProductName: 乐娱盒子
ProductVersion: 1.039
Translation: 0x0000 0x04b0

Malware.AI.4274092519 also known as:

BkavW32.AIDetectMalware
SkyhighBehavesLike.Win32.BadFile.dc
McAfeeArtemis!3478F28D0BF7
MalwarebytesMalware.AI.4274092519
ZillyaDownloader.OutBrowse.Win32.3623
K7AntiVirusRiskware ( 0049d8641 )
K7GWRiskware ( 0049d8641 )
ESET-NOD32a variant of Win32/RiskWare.ShouQu.A
RisingHacktool.ShouQu!8.13482 (CLOUD)
Antiy-AVLRiskWare/Win32.ShouQu
VBA32BScope.Downloader.BindEx
Cylanceunsafe
CrowdStrikewin/grayware_confidence_70% (D)

How to remove Malware.AI.4274092519?

Malware.AI.4274092519 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment