Malware.AI.1354094914 removal tips

The Malware.AI.1354094914 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1354094914 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

giffki.ru

How to determine Malware.AI.1354094914?


File Info:
crc32: 71462D8B
md5: a96d45129e4588f49c6c94a6ae46f11d
name: A96D45129E4588F49C6C94A6AE46F11D.mlw
sha1: da664ab13afdbb7eebf927c6ee1876abbe897c12
sha256: 1bbab3efaeba6620f0dbd0aff453b2bec94ac76ce8585387658895b9ff6fce34
sha512: 62ab349faf39c4d2385427f752e586934af4a4cf878182e05789581b1014b7d58884484d8c7a1290fc77c8cd071682f0220760b7ab03769e85cf20d4d8b1a408
ssdeep: 6144:3EUX5PuTKVqhR7/BZfipHAe1CCfpDTtKrBQHLWO43VTDBsB+sEGtavxl:3EmPuTG6T/fcgeYq9tKqr03VTDBGxmT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
ProductName: On they pass
FileDescription: Raised a head
Comments: Townsfellows
CompanyName: Schoolmates Inc.
Translation: 0x0000 0x04b0

Malware.AI.1354094914 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.StartPage1.33899
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.354452
Cylance	Unsafe
Zillya	Adware.HPDefender.Win32.2184
Sangfor	PUP.Win32.HPDefender.ZD
Cybereason	malicious.29e458
Cyren	W32/S-c2bad88f!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.NSIS.StartPage.jfm
BitDefender	Gen:Variant.Graftor.354452
NANO-Antivirus	Trojan.Win32.Agent.embvmq
MicroWorld-eScan	Gen:Variant.Graftor.354452
Tencent	Nsis.Trojan.Startpage.Lnej
Sophos	Mal/HopaDef-A
Comodo	ApplicUnwnt@#1m264mvanspjl
BitDefenderTheta	Gen:NN.ZexaF.34170.gC0@ay7wqGii
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fc
FireEye	Generic.mg.a96d45129e4588f4
Emsisoft	Gen:Variant.Graftor.354452 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1122469
Antiy-AVL	Trojan/Generic.ASMalwS.22D0E79
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Adware.Symmi.90089
AhnLab-V3	Trojan/Win32.StartPage.C1806091
McAfee	Artemis!A96D45129E45
MAX	malware (ai score=89)
VBA32	Trojan.StartPage
Malwarebytes	Malware.AI.1354094914
Rising	Trojan.Generic@ML.100 (RDML:L4JgG5tZF4dzLjK2klkyzg)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/StartPage.JFM!tr
AVG	Win32:Malware-gen

How to remove Malware.AI.1354094914?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.1354094914 removal tips