Categories: Malware

How to remove “Malware.AI.1479990419”?

The Malware.AI.1479990419 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1479990419 virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
Creates an excessive number of UDP connection attempts to external IP addresses
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
EternalBlue behavior
Attempts to access Bitcoin/ALTCoin wallets
Generates some ICMP traffic
Collects information to fingerprint the system
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.1479990419?


File Info:
crc32: 96E26BB6md5: e6bdfece6b3c2252d95d009f8a44cd81name: E6BDFECE6B3C2252D95D009F8A44CD81.mlwsha1: a292e79631844736ce0d2d0e5a727ecc6435f7bdsha256: 4e947c9ac582717d11b9165dc3d99314840061b012d0839c79681756bb8c13f2sha512: b2f462a9fa25e2cbee49f6d5fae410c26c291458801bb8af4674db1549f9962a30b71c811e6cf13e269e50db82f66f1f8b177e27030246d5d8c9f2ace235af72ssdeep: 12288:aStLzU05S6yOckrMQjvoPaP888888888888W88888888888qJaD:aSVLHckrMQjvh4Ytype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2017                                        FileVersion: 1.9.1.70CompanyName: PCWinSoft Software                   LegalTrademarks: PCWinSoft (tm)                                        Comments: PCWinSoft Software                  ProductName: 1AVMonitor                                        ProductVersion: 1.9.1.70FileDescription: 1AVMonitor                                         Translation: 0x0000 0x04b0

Malware.AI.1479990419 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.4691
MicroWorld-eScan	Trojan.Mint.Zamg.O
FireEye	Generic.mg.e6bdfece6b3c2252
CAT-QuickHeal	Ransom.Cerber.A4
McAfee	Ransomware-GCQ!E6BDFECE6B3C
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00517c481 )
BitDefender	Trojan.Mint.Zamg.O
K7GW	Trojan ( 00517c481 )
Cybereason	malicious.e6b3c2
BitDefenderTheta	Gen:NN.ZexaF.34590.Iq0@aK2Camej
Cyren	W32/Zerber.E.gen!Eldorado
Symantec	Packed.Generic.459
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.Cerber-9779201-1
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Ransom:Win32/Cerber.97fe459e
NANO-Antivirus	Trojan.Win32.Zerber.esybqc
AegisLab	Trojan.Win32.Zerber.j!c
Rising	Trojan.Kryptik!1.AD41 (CLASSIC)
Ad-Aware	Trojan.Mint.Zamg.O
Sophos	ML/PE-A + Mal/Cerber-K
Comodo	TrojWare.Win32.Bulta.GR@7k46qi
F-Secure	Heuristic.HEUR/AGEN.1106820
Zillya	Trojan.Zerber.Win32.3703
TrendMicro	Ransom_HPCERBER.SMALY5B
McAfee-GW-Edition	Ransomware-GCQ!E6BDFECE6B3C
Emsisoft	Trojan.Mint.Zamg.O (B)
Ikarus	Trojan.Crypt
Jiangmin	Trojan.Zerber.dcs
MaxSecure	Win.MxResIcn.Heur.Gen
Avira	HEUR/AGEN.1106820
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Ransom]/Win32.Zerber
Microsoft	Ransom:Win32/Cerber
Arcabit	Trojan.Mint.Zamg.O
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Mint.Zamg.O
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/RansomCrypt.Gen
Acronis	suspicious
VBA32	Trojan-Ransom.Zerber
ALYac	Trojan.Mint.Zamg.O
Malwarebytes	Malware.AI.1479990419
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Kryptik.FWSF
TrendMicro-HouseCall	Ransom_HPCERBER.SMALY5B
Tencent	Malware.Win32.Gencirc.10ba6d82
Yandex	Trojan.Zerber!GCjj4yJ9qFQ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Zamg.O!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.Generic.HxQB93AA