Malware

What is “Malware.AI.1928633043”?

Malware Removal

The Malware.AI.1928633043 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1928633043 virus can do?

  • Presents an Authenticode digital signature
  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
mrds.mail.ru
amigodl.mail.ru

How to determine Malware.AI.1928633043?


File Info:

crc32: B79A7303
md5: a0f4b2d02de4cdb41e51427520b59e99
name: A0F4B2D02DE4CDB41E51427520B59E99.mlw
sha1: 9f421e47578234609d457de85160bd2eed0120ed
sha256: f646e8ce32b9c9fa76ae230d5458a1d8166c56a110ffdc0033496ad28a649d23
sha512: 74e276fb7a3d03b8a1475b8ba502a701664a089dac8f22ab663ef9565cfb9a2a17af4f14d38a9dc4fe2569699649cc99197a2b257afd0d196e48c59a74e4fd84
ssdeep: 6144:lrZxAPgGCtlTE6p6aFXFUedSqR3Lc3AOTgQDBxHfoE13+8:lQetlTE6p6QXOeJE2QLQ63+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2015
InternalName: Amigo Mail.Ru
FileVersion: 2.0.0.169
CompanyName: Mail.Ru
ProductName: Amigo@Mail.Ru
ProductVersion: 2.0.0.169
FileDescription: Amigo@Mail.Ru
OriginalFilename: Amigo@Mail.Ru
Translation: 0x0409 0x04b0

Malware.AI.1928633043 also known as:

McAfeeGenericRXAA-FA!A0F4B2D02DE4
CylanceUnsafe
AegisLabTrojan.Win32.Generic.4!c
SangforRiskware.Win32.Ymacco.AAF6
K7AntiVirusAdware ( 004f7d741 )
K7GWAdware ( 004f7d741 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/S-506e523c!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/MailRu.B potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002C0OJO20
AvastFileRepMetagen [PUP]
ViRobotAdware.Mailru.401640.T
ComodoApplication.Win32.MailRu.BACS@6kp8ua
TrendMicroTROJ_GEN.R002C0OJO20
McAfee-GW-EditionArtemis!Trojan
SophosGeneric PUA JP (PUA)
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftProgram:Win32/Ymacco.AAF6
SUPERAntiSpywarePUP.MailRU/Variant
MalwarebytesMalware.AI.1928633043
MaxSecureTrojan.Malware.11973.susgen
FortinetW32/Generic.AC.3BBEB9!tr
AVGFileRepMetagen [PUP]

How to remove Malware.AI.1928633043?

Malware.AI.1928633043 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment