Malware

Malware.AI.1138264725 removal instruction

Malware Removal

The Malware.AI.1138264725 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1138264725 virus can do?

  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.1138264725?


File Info:

crc32: A4C3B23F
md5: d7c52d70b01f76305cdaa8177e9af096
name: D7C52D70B01F76305CDAA8177E9AF096.mlw
sha1: babbaacbd5c01492ddc213de6b4d71523c8b1666
sha256: 5bb2d9ab0c76a6adc390fa49c6bf92a347fb2d41a5d83ec4c9406b7ca62e29b2
sha512: 97d9a12346092b9df22dae23dcc248a2d970d8693562fb42db28a79becb22c06eb93491b6d3723d926ae5ab35f31164c85e359d4f384b06f21c95080ae9db63c
ssdeep: 24576:W8REj0QuImy87JGXsQWCoaymKY9We4zKnyaKDBessqLXd:W83y87AXsQWjfLe5z9nKN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 Alexander Roshal 1993-2018
InternalName: WinRAR
FileVersion: 5.60.0
CompanyName: Alexander Roshal
ProductName: WinRAR
ProductVersion: 5.60.0
FileDescription: WinRAR archiver
OriginalFilename: WinRAR.exe
Translation: 0x0409 0x04e4

Malware.AI.1138264725 also known as:

K7AntiVirusTrojan ( 005824471 )
LionicTrojan.Win32.Agent.m!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.47012203
CylanceUnsafe
SangforBackdoor.Win32.Agent.myudtn
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaBackdoor:Win32/NSISmod.6d4c6eeb
K7GWTrojan ( 005824471 )
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Packed.NSISmod.AX suspicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Generic-9897107-0
KasperskyBackdoor.Win32.Agent.myudtn
BitDefenderTrojan.GenericKD.47012203
MicroWorld-eScanTrojan.GenericKD.47012203
TencentWin32.Backdoor.Agent.Wtnh
Ad-AwareTrojan.GenericKD.47012203
SophosMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.47012203
EmsisoftTrojan.GenericKD.47012203 (B)
WebrootW32.Trojan.Gen
eGambitPE.Heur.InvalidSig
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.47012203
AhnLab-V3Infostealer/Win.CryptBot.R442436
McAfeeArtemis!D7C52D70B01F
MAXmalware (ai score=82)
VBA32Backdoor.Agent
MalwarebytesMalware.AI.1138264725
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H0CIN21
RisingTrojan.HiddenRun/NSIS!1.D9A8 (CLASSIC)
FortinetJS/Agent.PGK!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.1138264725?

Malware.AI.1138264725 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment