Malware

What is “Malware.AI.1798270213”?

Malware Removal

The Malware.AI.1798270213 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Malware.AI.1798270213 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (14 unique times)
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.e-game.com
www.bing.com
connect.facebook.net
pagead2.googlesyndication.com
ocsp.pki.goog
www.google-analytics.com
api.flattr.com
ocsp.digicert.com
crl4.digicert.com
crl3.digicert.com
button.flattr.com

How to determine Malware.AI.1798270213?


File Info:

crc32: EC21A178
md5: 517b96ffee762ad9c290bae45bf5cc9a
name: 517B96FFEE762AD9C290BAE45BF5CC9A.mlw
sha1: 20fe8ac25faeb074bd45c33c23e441d520322c81
sha256: 5452f171815e2de4ac6be47d1bb212dd264cc23f9683a23b45f8cf2d41b7f4c2
sha512: c8995d2a153bd58b9c81bcb1b5114653846f6dbd58305dfe296f461053fb6e27fae53df61e4f542aa0ebb323d74f2879c01ab4019b379c8dbf1d108bdb427c0c
ssdeep: 12288:NZdFaefekoFrstNY2VrledgxE3ZjhrVx86hxGmnI:zDj7op0i2rekE3phr86hMmI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.1798270213 also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Generic.4!c
CylanceUnsafe
SangforTrojan.Win32.Wacatac.B
K7GWRiskware ( 0040eff71 )
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
NANO-AntivirusTrojan.Win32.Strictor.esjlsx
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Emotet.jc
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.210F667
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeGenericRXCD-DL!517B96FFEE76
MalwarebytesMalware.AI.1798270213
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H0CIU21
FortinetW32/Tinba.Q!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Malware.AI.1798270213?

Malware.AI.1798270213 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment