Categories: Malware

Malware.AI.1638236818 removal

The Malware.AI.1638236818 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1638236818 virus can do?

Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Fake User-Agent detected
Attempts to modify proxy settings

How to determine Malware.AI.1638236818?


File Info:
name: 35AAA03EDBC3BB6E4E56.mlwpath: /opt/CAPEv2/storage/binaries/fb7007f7ee032252b911625417e2186d39bb3fe8f563e184ddf7a7269f83018fcrc32: 839789E8md5: 35aaa03edbc3bb6e4e5668512f1c59ddsha1: 1ab85632e63a1e4944128619a9dafb6405558863sha256: fb7007f7ee032252b911625417e2186d39bb3fe8f563e184ddf7a7269f83018fsha512: 896b06e17d02ab1085fa3891d361047cb550c8655f42b5027d7207649b32da64b731bbebfcdf5fbebc5a72f4fdd2be27db2687c852cb7a311c7091eb9ba77840ssdeep: 768:tTl75hMmo2GCcDZFxeJWXTjyRgwW8JhaQiBOEoK:t5Vh/Pcdx7wwoKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17C339F13F5D1C8F7D8A28A7081BA477B6B7F112A025196974B10E4B9BC316B0DB3B397sha3_384: 986f50dd63603161fd37370d9a0af55193dd6903b3358f9ca17b29879e810740d257c2ab88a75a68cdb886a7de9e96abep_bytes: 558bec6aff685881400068543b400064timestamp: 2011-10-18 08:24:30
Version Info:
Comments: CompanyName: Microsoft CorporationFileDescription: Microsoft Disk for Windows APPFileVersion: 4, 1, 400, 580InternalName: chdskLegalCopyright: (C) Microsoft Corporation. All rights reserved.LegalTrademarks: OriginalFilename: chdsk.exePrivateBuild: ProductName: Microsoft(R) Windows(R) Operating SystemProductVersion: 4, 1, 400, 580SpecialBuild: Translation: 0x0409 0x04b0

Malware.AI.1638236818 also known as:

Bkav	W32.FamVT.LozakaQ.Trojan
Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.35aaa03edbc3bb6e
CAT-QuickHeal	Downloader.Agent.20174
McAfee	Artemis!35AAA03EDBC3
Cylance	Unsafe
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Trojan ( 000ff4e31 )
Alibaba	Trojan:Win32/Generic.77f589ec
K7GW	Trojan ( 000ff4e31 )
Cybereason	malicious.edbc3b
Cyren	W32/ABRisk.WYKB-0548
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.OUZ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.426423
NANO-Antivirus	Trojan.Win32.Agent.cfbnxh
MicroWorld-eScan	Gen:Variant.Zusy.426423
Avast	Win32:Agent-ASKW [Trj]
Tencent	Win32.Trojan.Generic.Lkny
Ad-Aware	Gen:Variant.Zusy.426423
Emsisoft	Gen:Variant.Zusy.426423 (B)
Comodo	Malware@#2lfyzzco4djs3
DrWeb	Trojan.DownLoad4.14882
Zillya	Trojan.Agent.Win32.1147625
TrendMicro	TROJ_GEN.R002C0OFA22
McAfee-GW-Edition	BehavesLike.Win32.Worm.qt
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Zusy.426423
Webroot	W32.Malware.Heur
Avira	HEUR/AGEN.1222565
Arcabit	Trojan.Zusy.D681B7
Microsoft	Trojan:Win32/Wacatac.B!ml
TACHYON	Trojan-Downloader/W32.Agent.53248.AEE
AhnLab-V3	Downloader/Win32.Agent.C159759
BitDefenderTheta	Gen:NN.ZexaF.34712.dq0@ayF86zbb
ALYac	Gen:Variant.Zusy.426423
MAX	malware (ai score=86)
VBA32	suspected of Backdoor.PcClient.2
Malwarebytes	Malware.AI.1638236818
TrendMicro-HouseCall	TROJ_GEN.R002C0OFA22
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.GenAsa!aQjQPdm7yhc
Ikarus	Trojan-Dropper.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.YBKH!tr.dldr
AVG	Win32:Agent-ASKW [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)