Malware

What is “Malware.AI.4287966464”?

Malware Removal

The Malware.AI.4287966464 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4287966464 virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

Related domains:

www.cheathappens.com

How to determine Malware.AI.4287966464?


File Info:

name: 56D1BCB38B36E7C4F2FA.mlw
path: /opt/CAPEv2/storage/binaries/0490f69a753c3f0d047fb04035e94d28ec889b128ebfff76118d7011263d1425
crc32: B1DBE36D
md5: 56d1bcb38b36e7c4f2faf3e5e1880789
sha1: 062eabcefc5ab140eed8e0c732363abc245695e8
sha256: 0490f69a753c3f0d047fb04035e94d28ec889b128ebfff76118d7011263d1425
sha512: 385fb7eff22936c10cc874289d7b8c73d9525dc347c9b925e003147927cc0a49eb27fb0581d158f508ed5027277d52001c5b8c22f7a31d1c3c9cf0bdd3e67209
ssdeep: 49152:U4YNTEQ4hTz1PSEpH0J3eQgE4YTogxxawOJBV1Ls2wBdJBV1Ls2wBv:U4YchTzhV0Jogvrr+v
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T175A5BE46A2A041DDE6E3C179C262A327EA71746D07209BDB63D44BF52B23ED05F3E391
sha3_384: 75e90da7ab2d39512580a504f9baf40801f35da7e1f6754783168ff2ff0cd76dbbdacc86f73885e4e2e116794f02343f
ep_bytes: 68a800000068000000006850cf5f00e8
timestamp: 2017-11-29 13:58:57

Version Info:

0: [No Data]

Malware.AI.4287966464 also known as:

BkavW32.AIDetect.malware2
LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.GenericPMF.S17596037
CylanceUnsafe
ZillyaTrojan.GameHack.Win64.159
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWUnwanted-Program ( 0050cb4e1 )
K7AntiVirusUnwanted-Program ( 0050cb4e1 )
CyrenW32/GameHack.AH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.EVN potentially unsafe
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Gamehack-6847638-0
RisingPUF.GameHack!1.B348 (CLASSIC)
SophosGeneric PUA AG (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
FireEyeGeneric.mg.56d1bcb38b36e7c4
EmsisoftApplication.GameHack (A)
IkarusTrojan.Win32.Occamy
GDataWin32.Application.PSE.11423CR
WebrootW32.Adware.Gen
AviraTR/Kryptik.wweuz
Antiy-AVLTrojan/Generic.ASMalwS.247BD91
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.Helper.R240933
Acronissuspicious
McAfeeGenericRXAA-AA!56D1BCB38B36
VBA32Trojan.Downloader
MalwarebytesMalware.AI.4287966464
YandexTrojan.GenAsa!bJnf0WOlY7w
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/GameHack.A7832C08!tr
BitDefenderThetaGen:NN.ZexaF.34294.dwX@ayAHn8ai
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.4287966464?

Malware.AI.4287966464 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment