Categories: Malware

Malware.AI.1774768283 removal guide

The Malware.AI.1774768283 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1774768283 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.1774768283?


File Info:
crc32: 1FA5F553md5: 7f3bab2d15b0e389fccae959a094d065name: 7F3BAB2D15B0E389FCCAE959A094D065.mlwsha1: 112ee62ef457430e652aeed1d6ff988963eea4efsha256: 5b2ac83129bb25dc4b3a3d029bd42251477b8bb972d84d80e0404b9b83a0ed9csha512: 06528eb47058060f96a92cd4725c738cd9c6a9e05c012f3a6bd54e9f355ec1a68ef13b1caa40e04759cb0aa834ef81f7ae21883ba25b49fa31fe4b0890449dcassdeep: 24576:1HAnldZ7k3XA6C0wIhsvdPlbk+/FWwmb1/kt+2p:wl/Y3XA6CshWdPlbDFXc6+2ptype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x7effx9e70x7f51x7edcx79d1x6280 x7248x6743x6240x6709(C) 2001InternalName: KnightFileVersion: CompanyName: x7effx9e70x7f51x7edcPrivateBuild: LegalTrademarks: Comments: ProductName: x7effx9e70PCx4e07x80fdx7cbex7075SpecialBuild: ProductVersion: FileDescription: x7effx9e70PCx4e07x80fdx7cbex7075OriginalFilename: system.exeTranslation: 0x0804 0x04b0

Malware.AI.1774768283 also known as:

Lionic	Hacktool.Win32.Black.x!c
DrWeb	BackDoor.Siggen.13081
Cynet	Malicious (score: 99)
ALYac	Backdoor.Generic.64636
Cylance	Unsafe
Zillya	Backdoor.Agent.Win32.41337
Sangfor	Trojan.Win32.Black.d
Alibaba	Packed:Win32/Black.0a35ba4b
Cybereason	malicious.d15b0e
Cyren	W32/Backdoor.THZS-1406
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Adware.TrojanGuarder.NAA
Zoner	Probably Heur.ExeHeaderH
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Agent-66421
Kaspersky	Packed.Win32.Black.d
BitDefender	Backdoor.Generic.64636
NANO-Antivirus	Trojan.Win32.Agent.bhsnh
ViRobot	Backdoor.Win32.A.Agent.1018368
MicroWorld-eScan	Backdoor.Generic.64636
Tencent	Win32.Packed.Black.Ajlz
Sophos	Generic PUA BB (PUA)
Comodo	Backdoor@#qlni4b6t2l49
BitDefenderTheta	Gen:NN.ZexaF.34266.!K0aaO1xmNib
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OK421
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Backdoor.Generic.64636
Emsisoft	Backdoor.Generic.64636 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Packed.Black.alwz
Webroot	Trojan:Win32/Lodap!rts
Avira	BDS/Agent.iri
Antiy-AVL	Trojan/Generic.ASMalwS.80EE6B
Kingsoft	Win32.Hack.Agent.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Backdoor.Generic.64636
McAfee	Artemis!7F3BAB2D15B0
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.1774768283
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0OK421
Yandex	Backdoor.Agent!Ad6FqamYvWY
Ikarus	Backdoor.Agent
Fortinet	W32/Agent.IRI!tr.bdr
AVG	Win32:Trojan-gen