Malware

About “Malware.AI.4279542906” infection

Malware Removal

The Malware.AI.4279542906 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4279542906 virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.4279542906?


File Info:

name: 735C0FBE53CA19E70654.mlw
path: /opt/CAPEv2/storage/binaries/55bf6742d0ccc1c03c7ad067bd9bc8ebf16467961c2c9fa99ba3d33f93346488
crc32: 8C240ABC
md5: 735c0fbe53ca19e70654b640d3551efd
sha1: e19337928f0bfdd98355290d636c5f5d19d5646e
sha256: 55bf6742d0ccc1c03c7ad067bd9bc8ebf16467961c2c9fa99ba3d33f93346488
sha512: 0b85633e473a5bfcd01d8ca6c83ebe8ec87de09c2599ae66b6d3c2be2fa878085d53817dcf3e7fe24bad6e4ec43cc0da2d594d898c1c69041f72865653aa4087
ssdeep: 24576:dn889BV8AgQQR4cK5p9wfJp2w9Da546xyngKRC2UIOUZvU1JIpjx:dtMQMiQRkms46xgRC2UIOkvUTIf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17C752313BEC98437CAA197B00C96F422066FFC9659669E07B3447A4F1F32FC21A1675B
sha3_384: 26dbba6c4a9c49cd8b8de9af4fa312c0b8beab36e86dcfadd8633366405baf4da2918d70868bb8edffaedb4253606221
ep_bytes: e8d92e0000e97ffeffff558bec568bf1
timestamp: 2019-11-22 05:48:27

Version Info:

Comments:
CompanyName: 杭州顺网科技股份有限公司
FileDescription: 租号
FileVersion: 9, 2, 0, 12315
InternalName:
LegalCopyright: CopyRight (C) 2018-2020 shunwang. All Rights Reserved
OriginalFilename: main.exe
ProductName: zuhao
ProductVersion: 9, 2, 0, 12315
Translation: 0x0804 0x04b0

Malware.AI.4279542906 also known as:

BkavW32.Common.47D0B91A
SkyhighGenericRXPR-XT!735C0FBE53CA
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojanDropper:Win32/Generic.0dca9a75
K7GWRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
ClamAVWin.Malware.Generic-9949098-0
SUPERAntiSpywareTrojan.Agent/GenericKD
AvastFileRepMalware [Misc]
F-SecureTrojan.TR/Dropper.Gen2
IkarusTrojan.Dropper
JiangminTrojan.Generic.halxb
GoogleDetected
AviraTR/Dropper.Gen2
Antiy-AVLTrojan/Win32.Generic
CynetMalicious (score: 99)
McAfeeGenericRXPR-XT!735C0FBE53CA
VBA32Trojan.Wacatac
MalwarebytesMalware.AI.4279542906
YandexTrojan.DR.Agent!+UIBoKY41eQ
FortinetW32/PossibleThreat
AVGFileRepMalware [Misc]
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_70% (W)

How to remove Malware.AI.4279542906?

Malware.AI.4279542906 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment