How to remove “Malware.AI.4289807365”?

The Malware.AI.4289807365 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4289807365 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Malware.AI.4289807365?


File Info:
crc32: 09782A7C
md5: afa4a2e98e538cd690c6dac154612f54
name: AFA4A2E98E538CD690C6DAC154612F54.mlw
sha1: 99180b4db4ac7e462d3c852f0a50469221e4d080
sha256: bec4e2ba636b4a4244f0cd5ac81d90910f8bc08d0dbb3b6229f84b1b03659015
sha512: b8ac87f53ef530a7099df1aaf22e7d4d622017663ab9533b1ad9c55205c6db8f3054ac81692fb43cd1cead1b53fe461e3f7ba6642b9e3a63bf39f8623e83121d
ssdeep: 6144:BMRPmSYwBsgabvI8uLRhHuuAkIhP4qSL8NsLDuDYMLwfRWmJVBSw5lBUPSJmF:BYPmJvIBLPOuoPJBMMLxG159m
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright (C) JrMasterModelBuilder
InternalName: Clip2File
FileVersion: Voya Nui Online Game Save Handler
CompanyName: JrMasterModelBuilder
ProductVersion: Voya Nui Online Game Save Handler
PrivateBuild: 
LegalTrademarks: All rights reserved.
Comments: For saving progress in Voya Nui Online Game only.
ProductName: Clip2File
SpecialBuild: 
Build: Voya Nui Online Game Save Handler
FileDescription: Voya Nui Online Game Saver
Users: Unlimited.
Support: JrMasterModelBuilder
OriginalFilename: clip2file.exe
Developer: JrMasterModelBuilder
Translation: 0x0409 0x04e4

Malware.AI.4289807365 also known as:

DrWeb	Trojan.Siggen4.26972
ALYac	Trojan.Generic.KDV.728509
Cylance	Unsafe
Zillya	Trojan.DoubleEagle.Win32.318
Sangfor	Trojan.Win32.Ransom.buxin
BitDefender	Trojan.Generic.KDV.728509
Cybereason	malicious.98e538
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
NANO-Antivirus	Trojan.Win32.DoubleEagle.ficspl
ViRobot	Trojan.Win32.A.DoubleEagle.475648
SUPERAntiSpyware	Ransom.DoubleEagle/Variant
MicroWorld-eScan	Trojan.Generic.KDV.728509
Tencent	Win32.Trojan.Doubleeagle.Lqym
Ad-Aware	Trojan.Generic.KDV.728509
Comodo	Malware@#309a8hvuu6x4m
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.Generic.KDV.728509
Emsisoft	Trojan.Generic.KDV.728509 (B)
Jiangmin	Trojan/DoubleEagle.fy
Webroot	W32.Heuristic.Dkv
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Generic.KDV.DB1DBD
AegisLab	Trojan.Win32.DoubleEagle.j!c
GData	Trojan.Generic.KDV.728509
McAfee	Artemis!AFA4A2E98E53
MAX	malware (ai score=83)
VBA32	Hoax.DoubleEagle
Malwarebytes	Malware.AI.4289807365
Panda	Generic Malware
Rising	Trojan.Tilken!8.F605 (CLOUD)
Yandex	Trojan.GenAsa!LMxxAx3FH9w
Fortinet	W32/DoubleEagle.XT!tr

How to remove Malware.AI.4289807365?

Malware.AI.4289807365 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X