Malware

Malware.AI.4275662895 removal instruction

Malware Removal

The Malware.AI.4275662895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4275662895 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4275662895?


File Info:

name: 18CC1F8865A663BFF8E3.mlw
path: /opt/CAPEv2/storage/binaries/3f2a5ef6a69ceed991fbda94ec45a36244317534bb4570ba3f464cd1aa86e7ba
crc32: 6F441145
md5: 18cc1f8865a663bff8e3556410c29c2f
sha1: bf3a87bb750e754a2d75a8e4fe90a85d9f5a0a51
sha256: 3f2a5ef6a69ceed991fbda94ec45a36244317534bb4570ba3f464cd1aa86e7ba
sha512: 1b0efc9e093c7965697bff3fc4e36143cf22a3ad76b177064d39aa756a5c9c4b88287f91aa6903d8aad3dbab976226e194ad823fd21032f179eb8cd2622521ac
ssdeep: 24576:8cbD/e1EBDW3iZIIdnMV8LppRxpxpssRhMkrVkBShvG+C+cscIb/b:8cbi6WiZI78LphptRhMGkBIGXIzb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1586522507AC18471E4A6183119B19B71BB3C7C309B799AEF63943F2E9F301D19A35BA3
sha3_384: 66840594566adc9d66131c82a6f10c7ad2b3ebb38c2378066507706a35c93b67f0c8fc93b9c65fa21e0d1953fd6b5fbd
ep_bytes: e8dc040000e978feffffe98a46000055
timestamp: 2023-07-20 21:04:38

Version Info:

0: [No Data]

Malware.AI.4275662895 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zenpak.tspc
MicroWorld-eScanTrojan.Uztuby.4
FireEyeGeneric.mg.18cc1f8865a663bf
McAfeeArtemis!18CC1F8865A6
Cylanceunsafe
ZillyaTrojan.Zenpak.Win32.19996
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a8e831 )
AlibabaTrojan:Win32/Zenpak.fa5c2b89
K7GWTrojan ( 005a8e831 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Kryptik.KFU.gen!Eldorado
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Zenpak.dfqf
BitDefenderTrojan.Uztuby.4
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:InjectorX-gen [Trj]
TencentWin32.Trojan.Zenpak.Sgil
EmsisoftTrojan.Uztuby.4 (B)
F-SecureTrojan.TR/AD.Fauppod.mdqel
VIPRETrojan.Uztuby.4
TrendMicroTROJ_GEN.R002C0RGP23
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Dropper-AU
SentinelOneStatic AI – Suspicious PE
AviraTR/Patched.mfjrc
Antiy-AVLTrojan/Win32.Zenpak
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Uztuby.4 [many]
ZoneAlarmTrojan.Win32.Zenpak.dfqf
GDataWin32.Trojan.PSE.T85WQB
GoogleDetected
BitDefenderThetaGen:NN.ZedlaF.36318.pv8@a0eJMUFi
ALYacGen:Variant.Lazy.364360
MAXmalware (ai score=88)
VBA32TScope.Malware-Cryptor.SB
MalwarebytesMalware.AI.4275662895
PandaTrj/Chgt.AC
TrendMicro-HouseCallTROJ_GEN.R002C0RGP23
RisingTrojan.Kryptik!1.E3CC (CLASSIC)
FortinetW32/GenKryptik.GMCU!tr
AVGWin32:InjectorX-gen [Trj]
Cybereasonmalicious.b750e7
DeepInstinctMALICIOUS

How to remove Malware.AI.4275662895?

Malware.AI.4275662895 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment