Malware

Malware.AI.4284672459 malicious file

Malware Removal

The Malware.AI.4284672459 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4284672459 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Network activity detected but not expressed in API logs
  • Checks for the presence of known devices from debuggers and forensic tools
  • Anomalous binary characteristics

How to determine Malware.AI.4284672459?


File Info:

crc32: A563C39C
md5: 426efb5b8e99719ad7a4d8cf6de2b2b5
name: 426EFB5B8E99719AD7A4D8CF6DE2B2B5.mlw
sha1: 6090eacc1fd0af6a87d60549c1e44ba05a754ea3
sha256: e9ea58949218251b89df82be5f8e0cbc17de418c3e9304d2109aee7bdd026b7e
sha512: 633021282b8284984fb3e4d2cb8d23a0f4df8ed82c51cc3fe08e20093dfd9fdda12c1aeff1eab197f03f18e68c1e2677f6416145a26135b693ad8e6f681b88e7
ssdeep: 24576:6/GSWJgn1pzocCA5n4xjy4Z51CHehlihca0E1Hjz+cHSsf0xccKqix+VdSi:6/GVg7H+V5AmlihjH+cHSsEcLxedSi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Malware.AI.4284672459 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00129bd51 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Metla
ALYacTrojan.GenericKD.36977307
CylanceUnsafe
SangforTrojan.Win32.Metla.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Metla.d6f1dcc6
K7GWTrojan ( 00129bd51 )
Cybereasonmalicious.c1fd0a
CyrenW32/Fujack.U
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Rootkit-gen [Rtk]
ClamAVWin.Dropper.Rlpacked-7670654-0
KasperskyVHO:Trojan.Win32.Metla.gen
BitDefenderTrojan.GenericKD.36977307
ViRobotBackdoor.Win32.IRCBot.35288
MicroWorld-eScanTrojan.GenericKD.36977307
Ad-AwareTrojan.GenericKD.36977307
SophosML/PE-A
ComodoTrojWare.Win32.Spy.KeyLogger.~P@19qrg4
BitDefenderThetaGen:NN.ZexaF.34692.zj1aaCu8n9ji
VIPREVirus.Win32.Fujacks.a (v)
TrendMicroTROJ_GEN.R002C0PEQ21
McAfee-GW-EditionBehavesLike.Win32.VirRansom.tc
FireEyeGeneric.mg.426efb5b8e99719a
EmsisoftTrojan.GenericKD.36977307 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_91%
MicrosoftTrojan:Win32/Tiggre!rfn
GridinsoftMalware.Win32.Pack.6649!se
AegisLabTrojan.Win32.Generic.lwOb
ZoneAlarmHEUR:Trojan.Win32.Metla.a
GDataTrojan.GenericKD.36977307
AhnLab-V3Win32/MalPackedB.suspicious
Acronissuspicious
McAfeeDownloader-BOP.f!rootkit
MAXmalware (ai score=82)
VBA32TScope.Malware-Cryptor.SB
MalwarebytesMalware.AI.4284672459
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PEQ21
RisingVirus.Undefined!8.23 (CLOUD)
YandexPacked/RLPack
IkarusVirus.Win32.Heur
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Metla.A!tr
AVGWin32:Rootkit-gen [Rtk]
Paloaltogeneric.ml

How to remove Malware.AI.4284672459?

Malware.AI.4284672459 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment