What is "Malware.AI.1796204901"?

The Malware.AI.1796204901 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1796204901 virus can do?

Executable code extraction
Creates RWX memory
Loads a driver
Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Attempts to remove evidence of file being downloaded from the Internet
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Attempts to stop active services
A process attempted to delay the analysis task by a long amount of time.
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Creates a copy of itself
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

kingsfoodsbd.com

How to determine Malware.AI.1796204901?


File Info:
crc32: 55A71B30
md5: 3e1793f39d9cb6102373e8aecbda99ee
name: 3E1793F39D9CB6102373E8AECBDA99EE.mlw
sha1: a257aadce96e40558f67dd21fb55d535345be999
sha256: 73136a6c7bf7bc82849dee7af09a474dedd974c19cf8def9be508c28de5a4109
sha512: 6987c2b5b8ecf4560f956862fdc21c3b299d94d1b915982059e001dab376ede823d6f9781e3495de83c34bbff604355452e200e2cb861bcc6c88f756659252ac
ssdeep: 24576:kl6AO+W19BgFQIOqoppwJd4LJMhXcsj9MUScYema8:kl6AOv19BKZopqJd4659MUScYema8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Malware.AI.1796204901 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FJFO
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-PSW.Win32.Stealer.gen
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34088.@zW@a4qyc2li
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.3e1793f39d9cb610
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_96%
Microsoft	Trojan:Win32/Wacatac.B!ml
Acronis	suspicious
Malwarebytes	Malware.AI.1796204901
Rising	Trojan.Kryptik!1.D8A5 (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen

How to remove Malware.AI.1796204901?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Malware.AI.1796204901”?