Malware

Malware.AI.1760773575 removal guide

Malware Removal

The Malware.AI.1760773575 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1760773575 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Malware.AI.1760773575?


File Info:

crc32: 215B36CC
md5: b6ce198551f9cbbbc4810172b93700f5
name: B6CE198551F9CBBBC4810172B93700F5.mlw
sha1: d44eca473a05ee95050256a5d5837d8b8fd37a42
sha256: d0192d3d5617df70af732b54d63e4388da04bc3cf66e0939df980600cf2db3ed
sha512: e856b7b50aa48e72007f8cf51b32a59bac314ed50ffb7129cc5c2ef5b6722f19e1f6d6a8820b9cbc4b305c061a6340e01175426e5062d4948c4b5b18ce79db83
ssdeep: 6144:NT/SIcHA9N0CUesiT4/6dTQ263yyJGtuxKa/7Dx:NTn08T+6Gp3zWRa//
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x8fd0x884cx5355x4e00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Malware.AI.1760773575 also known as:

Elasticmalicious (high confidence)
ALYacGen:Variant.Bulz.299600
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
K7GWAdware ( 0050718d1 )
K7AntiVirusAdware ( 0050718d1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 100)
BitDefenderGen:Variant.Bulz.299600
NANO-AntivirusTrojan.Win32.RiskGen.ctlrkm
MicroWorld-eScanGen:Variant.Bulz.299600
Ad-AwareGen:Variant.Bulz.299600
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZedlaF.34170.sC8ba4lAGZgb
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.b6ce198551f9cbbb
EmsisoftGen:Variant.Bulz.299600 (B)
SentinelOneStatic AI – Suspicious PE
JiangminBackdoor/Huigezi.alww
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASCommon.FA
GDataWin32.Application.PUPStudio.A
McAfeeArtemis!B6CE198551F9
MAXmalware (ai score=87)
VBA32BScope.Trojan.Bitrep
MalwarebytesMalware.AI.1760773575
TrendMicro-HouseCallTROJ_GEN.R005H06IU21
IkarusTrojan-PWS.Win32.QQPass
MaxSecureDropper.Dinwod.frindll
FortinetRiskware/Application
AVGFileRepMetagen [Malware]

How to remove Malware.AI.1760773575?

Malware.AI.1760773575 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment