Malware.AI.4281791385 information

The Malware.AI.4281791385 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4281791385 virus can do?

Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.4281791385?


File Info:
name: 2B11A3A191F86F7E6330.mlw
path: /opt/CAPEv2/storage/binaries/6c7954991044accfe3b2ad5f9811cfe0b036c00cd492f421712c8a17a99dac56
crc32: FB824EE7
md5: 2b11a3a191f86f7e6330e2cb65a47de1
sha1: ca215c80e19848f12a938d437b37890dd329c549
sha256: 6c7954991044accfe3b2ad5f9811cfe0b036c00cd492f421712c8a17a99dac56
sha512: 737993f2516f6cd61ea974cf3018aafd318b26a83c55c587a3b63a32c837b36ef4a25803537148e68dadcd9dc857f4a866457f34f97736d37b3974adb1a4c25c
ssdeep: 24576:rEyqrqwPZ/RyGoGQ0uT2U5ssWIx3mKshBkcbsBwbh:mrRkYoT2QsNIx3cBkcbssh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DB2512213BF581B7D5421A3189DD2BF5B1FBD7454F21188723C44F1DAE389E2E23962A
sha3_384: 510aa9b3c562b759988580f601ca6e8d49f5dcd63e8b84a4340c9c420fcbbd97e2834ea56aae3abcebed7d521883e914
ep_bytes: 558bec6aff68e8ee420068668d420064
timestamp: 2021-12-26 14:00:00

Version Info:
CompanyName: Igor Pavlov
FileDescription: 7z SFX
FileVersion: 21.07
InternalName: 7z.sfx
LegalCopyright: Copyright (c) 1999-2021 Igor Pavlov
OriginalFilename: 7z.sfx.exe
ProductName: 7-Zip
ProductVersion: 21.07
Translation: 0x0409 0x04b0

Malware.AI.4281791385 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0042f7bb1 )
K7GW	Trojan ( 0042f7bb1 )
BitDefenderTheta	Gen:NN.ZexaF.34666.hnuaauuePQjb
Cyren	W32/Trojan.MSWS-7880
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Kaspersky	VHO:Trojan-Spy.Win32.Convagent.gen
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
Zillya	Trojan.Generic.Win32.1643944
SentinelOne	Static AI – Suspicious SFX
Sophos	Generic PUA HC (PUA)
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.4281791385
APEX	Malicious
Fortinet	Riskware/Application

How to remove Malware.AI.4281791385?

Malware.AI.4281791385 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X