Malware

Malware.AI.1202250538 removal tips

Malware Removal

The Malware.AI.1202250538 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1202250538 virus can do?

  • Starts servers listening on 0.0.0.0:0
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.1202250538?


File Info:

crc32: CCE25E6F
md5: a87302b2c1f19d168c362e072d97c68a
name: A87302B2C1F19D168C362E072D97C68A.mlw
sha1: af4fbe75ebc3f40292669937d259d8f1afef3980
sha256: c1bbc233f0f714579ad0e9ceccfbd5ba7b60ec081c6ae800d4f407a7937cb104
sha512: ac2d44aa89aedd0c3baf52fd61f2f40f8af6954789006b2c7c0f8b1e2adb74681086646ebf3a4bceb74d13f85dbc8d54298d73f35b2a9b757fdc61a4995c16db
ssdeep: 12288:I3VSgo5YTnFoC8a47AJP+2sbg8Fp6Jf7cDwMysX42KSKcpevPPx:I3XoSbFo047xPbgb1cEMZX42KSRpev
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (x65e0x53efx975ex8bae) 2007 QQ:4564405
InternalName: PcShare
FileVersion: 3, 0, 1, 5
CompanyName:
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: PcShare x8fdcx7a0bx63a7x5236
SpecialBuild:
ProductVersion: 3, 0, 1, 5
FileDescription: PcShare x8fdcx7a0bx63a7x5236x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: PcShare.EXE
Translation: 0x0804 0x04b0

Malware.AI.1202250538 also known as:

K7AntiVirusTrojan ( 00110be01 )
LionicTrojan.Win32.PcClient.l63Q
CynetMalicious (score: 99)
CAT-QuickHealTrojan.IGENERIC
ALYacTrojan.GenericKD.37667810
CylanceUnsafe
SangforTrojan.Win32.Sabsik.FL
AlibabaTrojan:Win32/PcClient.67c44adc
K7GWTrojan ( 00110be01 )
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/PcClient.NGQ
AvastWin32:Agent-MDR [Trj]
BitDefenderTrojan.GenericKD.37667810
ViRobotTrojan.Win32.Z.Pcclient.1185792
MicroWorld-eScanTrojan.GenericKD.37667810
TencentWin32.Trojan.Generic.Lndz
Ad-AwareTrojan.GenericKD.37667810
SophosMal/Generic-S
ComodoBackdoor.Win32.PcClient.~d1@1msrsw
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionGenericRXQE-IS!A87302B2C1F1
FireEyeGeneric.mg.a87302b2c1f19d16
EmsisoftTrojan.GenericKD.37667810 (B)
AviraTR/PcClient.twbaa
eGambitTrojan.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D23EC3E2
GDataTrojan.GenericKD.37667810
AhnLab-V3Backdoor/Win32.Hupigon.R142185
McAfeeGenericRXQE-IS!A87302B2C1F1
MAXmalware (ai score=80)
MalwarebytesMalware.AI.1202250538
TrendMicro-HouseCallTROJ_GEN.R002C0PJ321
YandexBackdoor.PCClient.Gen.4
FortinetW32/PcClient.NGQ!tr
AVGWin32:Agent-MDR [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1202250538?

Malware.AI.1202250538 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment