Malware

Malware.AI.1510334846 malicious file

Malware Removal

The Malware.AI.1510334846 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1510334846 virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to delete volume shadow copies
  • A system process is generating network traffic likely as a result of process injection
  • Behavior consistent with a dropper attempting to download the next stage.
  • Installs itself for autorun at Windows startup
  • Attempts to modify browser security settings
  • Creates a copy of itself
  • Harvests information related to installed mail clients
  • Collects information to fingerprint the system
  • Uses suspicious command line tools or Windows utilities

Related domains:

itytizoc.megezawone.net
anos.megezawone.net
ixigeso.megezawone.net
elodi.megezawone.net
iqagjjopazn.megezawone.net
afutozedona.megezawone.net
yremusij.megezawone.net
asije.megezawone.net
awirc.megezawone.net
ulyw.megezawone.net
arqxjneb.megezawone.net
aqahubyv.megezawone.net
ytufhhabyj.megezawone.net
uwygalucug.megezawone.net
uvutowaneve.megezawone.net
yhadesy.megezawone.net
itutulyge.megezawone.net
ovuh.megezawone.net
emomipgdyd.megezawone.net

How to determine Malware.AI.1510334846?


File Info:

crc32: 3690A189
md5: 91e4e9e04443e60250f16b69c9911038
name: 91E4E9E04443E60250F16B69C9911038.mlw
sha1: 33921b99f2a0a1cda490b42e578c61255f9c0575
sha256: abf0cc91517ab20049a72a18d995825e8fc601aa2bea51456b0290fe23548ee2
sha512: cb2f66543fb6fe57f67873b20632b454b4a348faa4f3d8b0b84f3d93698a3c9912bd087802b4e1569a74cec2aaa95890b9c89dbf60db48d1c729c35d454e94e0
ssdeep: 1536:qI20UaQYUHjc9swuettBx4N0ZTs8mPVBB12I0X+iUkdbA/tKR:a09UpwueFxk0HWBMKi3bA/t
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.1510334846 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0055e3ef1 )
LionicTrojan.Win32.Agent.lGYs
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.761
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.355302
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanDropper:Win32/dropper.ali1003001
K7GWTrojan ( 0055e3ef1 )
Cybereasonmalicious.04443e
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.TorrentLocker.A
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Rack-7582623-0
KasperskyTrojan-Ransom.Win32.Rack.ba
BitDefenderGen:Variant.Zusy.355302
NANO-AntivirusTrojan.Win32.Rack.efuzqg
MicroWorld-eScanGen:Variant.Zusy.355302
TencentWin32.Trojan.Filecoder.Hufk
Ad-AwareGen:Variant.Zusy.355302
SophosMal/Generic-R + Troj/Ransom-CHI
BitDefenderThetaGen:NN.ZexaF.34142.fuW@aGrXNpgi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.nc
FireEyeGeneric.mg.91e4e9e04443e602
EmsisoftGen:Variant.Zusy.355302 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Rack.e
WebrootW32.Trojan.Gen
AviraTR/Crypt.ZPACK.Gen8
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.16EC540
MicrosoftRansom:Win32/Teerac.A
ArcabitTrojan.Zusy.D56BE6
GDataGen:Variant.Zusy.355302
AhnLab-V3Trojan/Win32.Teerac.R173123
McAfeeGenericATG-FCEG!91E4E9E04443
MAXmalware (ai score=87)
VBA32BScope.Backdoor.Androm
MalwarebytesMalware.AI.1510334846
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.90 (RDML:5xdRVWbWvLhzKak6ywRSOA)
YandexTrojan.Rack!vZql7d9E5Mk
IkarusTrojan-Ransom.Torrentlocker
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AP.387180!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.1510334846?

Malware.AI.1510334846 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment