Malware.AI.4281784710 removal instruction

The Malware.AI.4281784710 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4281784710 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.4281784710?


File Info:
name: BAC0931192424F5B4F65.mlw
path: /opt/CAPEv2/storage/binaries/7a3d3cc08c1ae4a4f858baecf1cc7f2a61e2b7bb995f6049618fba4cca42ecc6
crc32: 13DA7FE4
md5: bac0931192424f5b4f65d5b029aee52f
sha1: 5762be4793f094a999412b703d1a14abb1010470
sha256: 7a3d3cc08c1ae4a4f858baecf1cc7f2a61e2b7bb995f6049618fba4cca42ecc6
sha512: 41e3d17c9e04d68c012e6e3d995863a4b888bc6bca7ade38b15519a085532edf4681e798cc891707fe9dddc0f0a20c660973098fecc121d638770794ab801dfd
ssdeep: 196608:nN5xGRFz+DUMZI3/JJHTBcGvK8IqjmohsgOvrVnH3:cHSD7ixjzS8BogwnX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BD863381E254C9D1FC8112B5DC7ADB7931A39F0E79B0860FA51F34267979343A4ABF0A
sha3_384: f56d92e641b4db50bc7fddad502bb9d3de295a9d0c072fa7e41aa756a32f01156b0dd93b383620138b4b148755a9d6f7
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2016-12-11 21:50:48

Version Info:
CompanyName: 四叶草工作室
FileDescription: 四叶草PDF阅读器1.5.0.0安装程序
FileVersion: 1.5.0.0
LegalCopyright: 版权所有 © 2023 四叶草工作室
ProductName: 四叶草PDF阅读器
ProductVersion: 1.5.0.0
Translation: 0x0804 0x03a8

Malware.AI.4281784710 also known as:

AVG	Win32:Malware-gen
MicroWorld-eScan	Application.Generic.3558351
FireEye	Application.Generic.3558351
Cylance	unsafe
Zillya	Adware.KuziTui.Win32.1792
Sangfor	Adware.Win32.Kuzitui.Vmat
CrowdStrike	win/grayware_confidence_90% (W)
Alibaba	AdWare:Win32/KuziTui.1aa74272
K7GW	Riskware ( 00584baa1 )
K7AntiVirus	Riskware ( 00584baa1 )
BitDefenderTheta	Gen:NN.ZexaF.36802.@F0@aSWvAagj
Symantec	PUA.Gen.2
Kaspersky	not-a-virus:UDS:AdWare.Win32.KuziTui.gen
BitDefender	Application.Generic.3558351
Avast	Win32:Malware-gen
Sophos	Generic Reputation PUA (PUA)
VIPRE	Application.Generic.3558351
Emsisoft	Application.Generic.3558351 (B)
Varist	W32/ABRisk.ZUFR-0232
Antiy-AVL	GrayWare[AdWare]/Win32.KuziTui
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Application.Generic.D364BCF [many]
ZoneAlarm	not-a-virus:UDS:AdWare.Win32.KuziTui.gen
GData	Gen:Variant.Jaik.55721
ALYac	Gen:Variant.Jaik.55721
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.4281784710
TrendMicro-HouseCall	TROJ_GEN.R002H07KS23
Rising	Adware.AppPush!1.DA69 (CLASSIC)
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove Malware.AI.4281784710?

Malware.AI.4281784710 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X