Malware

Malware.AI.171571401 removal

Malware Removal

The Malware.AI.171571401 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.171571401 virus can do?

  • Executable code extraction
  • Possible date expiration check, exits too soon after checking local time
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Attempts to identify installed AV products by registry key
  • Harvests information related to installed mail clients
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.171571401?


File Info:

crc32: 2988A358
md5: d1127705d81bf681ebd3c3a5e4176308
name: D1127705D81BF681EBD3C3A5E4176308.mlw
sha1: f4068a0a39d69a1995a7c56a5d7eed9c36a8eb5a
sha256: bbd2760c42011d23626dc21d7bb1d52ec07336e9f0579d8cab2f3025143f4415
sha512: b2e6328e068065a1a5ac86ba066414a8317adcd21a29e5e99b91e29b17f4f02f59f074b83e792e74c6fe89832074da86b07cc8b5893bf1e589ce034522ce99b3
ssdeep: 24576:rPi9cThaekv6ixQZYk1gnBgGXX/i4EWdr/abZgwjVKElQTRYAzhNbaE1G:G9dFv6btKy4Zdr4joPhNbv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Setup Engine Copyright xa9 2001 - 2004 Indigo Rose Corporation
InternalName: suf60_setup
FileVersion: 6.0.1.4
CompanyName:
PrivateBuild:
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: Created with Setup Factory 6.0
ProductName: Setup Factory 6.0 Runtime
SpecialBuild:
ProductVersion: 6.0.1.4
FileDescription: Setup Application
OriginalFilename: setup.exe
Translation: 0x0409 0x04e4

Malware.AI.171571401 also known as:

DrWebFDOS.Qweek.3
CynetMalicious (score: 99)
CMCGeneric.Win32.d1127705d8!CMCRadar
ALYacDropped:Trojan.GenericKD.46276948
CylanceUnsafe
AlibabaTrojanDownloader:Win32/IstBar.fee8471c
Cybereasonmalicious.5d81bf
CyrenW32/Tool.SOAW-4594
SymantecSecurityRisk.gen1
ESET-NOD32multiple detections
APEXMalicious
AvastBV:Zapchast-O [Trj]
ClamAVWin.Downloader.Winad-22
KasperskyTrojan-Downloader.Win32.IstBar.is
BitDefenderDropped:Trojan.GenericKD.46276948
NANO-AntivirusTrojan.Win32.IstBar.zqom
MicroWorld-eScanDropped:Trojan.GenericKD.46276948
Ad-AwareDropped:Trojan.GenericKD.46276948
SophosGeneric PUA PE (PUA)
ComodoMalware@#248a88c7d3xgq
BitDefenderThetaAI:Packer.DC0FCE361D
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeDropped:Trojan.GenericKD.46276948
EmsisoftDropped:Trojan.GenericKD.46276948 (B)
JiangminTrojanDownloader.IstBar.fb
WebrootW32.Trojan.Downloader.IstBar.is
AviraDR/IstBar.IS.1
eGambitUnsafe.AI_Score_90%
KingsoftWin32.TrojDownloader.IstBar.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D2C22154
ZoneAlarmPacked.Win32.Krap.ai
GDataDropped:Trojan.GenericKD.46276948
McAfeeArtemis!D1127705D81B
MAXmalware (ai score=99)
VBA32BScope.TrojanDropper.Agent
MalwarebytesMalware.AI.171571401
PandaTrj/CI.A
YandexTrojan.DL.IstBar!25oRRj0wIwk
FortinetW32/Istbar.142!tr.dldr
AVGBV:Zapchast-O [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.171571401?

Malware.AI.171571401 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment