Malware.AI.126344916 removal guide

The Malware.AI.126344916 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.126344916 virus can do?

Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.126344916?


File Info:
crc32: A03ADD7F
md5: aee44a92e9a26d508a0fd6eb4131ef61
name: AEE44A92E9A26D508A0FD6EB4131EF61.mlw
sha1: 26dd52d92b2080f506a3ead21c5b5e96c4fe7b67
sha256: 934546860ed2d12abea154b14d3d13197854c51d67e367a036202d70f39a2212
sha512: 977752d74807af2b1833fb55e3a163ee2d35862c2d88fdffe51b5f7917de40ae549a1031922bf886bce4e2fe2504cca22aa595de1c661c1f268107a885ae3d46
ssdeep: 12288:MXmwRo+mv8QD4+0N46V1Zj4P0SrT62tTAlJu0HfuGS8AvzsKgCcHzCqT/feFVgUz:MX48QE+UnjA0SXtTYhHWJ8Gz4Cm2qjyJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Abdullah ERTxdcRK                                                                                     
FileDescription: Office Deploy Tool 1 Installation                           
FileVersion: 1                   
Comments: 
CompanyName: Abdullah ERTxdcRK                                             
Translation: 0x0409 0x04e4

Malware.AI.126344916 also known as:

Bkav	W32.AIDetect.malware2
ALYac	AIT:Trojan.Nymeria.4108
Cylance	Unsafe
BitDefender	AIT:Trojan.Nymeria.4108
Cybereason	malicious.2e9a26
APEX	Malicious
MicroWorld-eScan	AIT:Trojan.Nymeria.4108
Sophos	ML/PE-A
FireEye	Generic.mg.aee44a92e9a26d50
Emsisoft	AIT:Trojan.Nymeria.4108 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	AIT:Trojan.Nymeria.D100C
GData	AIT:Trojan.Nymeria.4108 (4x)
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.126344916
Ikarus	Worm.Win32.Msil
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq

How to remove Malware.AI.126344916?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.126344916 removal guide