What is “Malware.AI.4289380548”?

The Malware.AI.4289380548 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4289380548 virus can do?

Authenticode signature is invalid

How to determine Malware.AI.4289380548?


File Info:
name: 5B81A266F4D5AEF74010.mlw
path: /opt/CAPEv2/storage/binaries/6798c9e633aead25b61550e71eb726f3c39619e161477adef18013809ca64bee
crc32: 0DE0140D
md5: 5b81a266f4d5aef7401084725d20291b
sha1: dde781139c6953a59a12c047e01f5ad7d12f2478
sha256: 6798c9e633aead25b61550e71eb726f3c39619e161477adef18013809ca64bee
sha512: 54caa8269f9615904fb807d431e076616548f2e07540cff3374278234f9de210e8c11f54b0785053d42407bbf9be77050d291cf444d05f510c35eee8aae72e40
ssdeep: 768:e1tj7LdCsxL1ZbzV9z0Tj1tj7LdCsxL1ZbzV9z0Tbc6FsOzdA6R1:eLL1/hV9z0HLL1/hV9z0zFxR1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A537D163C90C032C402A9F41879D662AF6F5D1123A7A4CB6B9A277B5F313D1A63E35E
sha3_384: ecec65ffdd1c28c172e178b871d906ed2a6a2fd719c7dc4b26cc69ce2cdc7934e40fe043fd8cca370333c2b118c201ee
ep_bytes: e8b5150000e979feffff8bff558bec81
timestamp: 2014-07-31 06:09:13

Version Info:
0: [No Data]

Malware.AI.4289380548 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Bulknet.1800
MicroWorld-eScan	Gen:Variant.Graftor.672218
FireEye	Generic.mg.5b81a266f4d5aef7
McAfee	GenericRXGV-QF!5B81A266F4D5
Zillya	Worm.Agent.Win32.62860
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004d56331 )
K7GW	Trojan ( 004d56331 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZexaF.34114.duX@aGnxcSp
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Agent.NPS
TrendMicro-HouseCall	TROJ_GEN.R035C0OLN21
BitDefender	Gen:Variant.Graftor.672218
NANO-Antivirus	Trojan.Win32.Bulknet.eljnif
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Graftor.Sxyf
Ad-Aware	Gen:Variant.Graftor.672218
TACHYON	Trojan/W32.Agent.60849.B
Emsisoft	Gen:Variant.Graftor.672218 (B)
Comodo	TrojWare.Win32.Imwee.A@6v1jgu
Baidu	Win32.Worm.Agent.ie
TrendMicro	TROJ_GEN.R035C0OLN21
McAfee-GW-Edition	GenericRXGV-QF!5B81A266F4D5
Sophos	Generic ML PUA (PUA)
Ikarus	Worm.Win32.Agent
GData	Gen:Variant.Graftor.672218
Jiangmin	Trojan.Generic.eatwn
Antiy-AVL	Trojan/Win32.Badur
Arcabit	Trojan.Graftor.DA41DA
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.QF.C4392665
ALYac	Gen:Variant.Graftor.672218
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.4289380548
APEX	Malicious
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazoCzZvhhAuyWe8whQ7vXM1a)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.NPS!worm
AVG	Win32:Malware-gen
Cybereason	malicious.6f4d5a

How to remove Malware.AI.4289380548?

Malware.AI.4289380548 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X