Malware

Malware.AI.1936256435 removal

Malware Removal

The Malware.AI.1936256435 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1936256435 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Malware.AI.1936256435?


File Info:

crc32: ACF1EC05
md5: 0fdc48ec739297653faf423c746f98e6
name: 0FDC48EC739297653FAF423C746F98E6.mlw
sha1: 11849baf8c8a0d6a73abde7b2cd31faefd2077de
sha256: 2061cd3cd575561118ebb7299444ee9cd59e9977cd042a96d9a1ef38a639c625
sha512: 19dd28515178f360a6b533cfb09adbd257d64f3acf8e7350f04f0bbece00a70c927372c4462fc941241be05df70b0e57c04c3749c13c80450e71e6987e191ca0
ssdeep: 12288:vOWzHdN7epzZ4cg5jvMskxjgysB/BKsb9DajZ8ym9inT9T:mWzHKzZNg5jEskxrsZBKsb4+ymGT9T
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Nogebo Ltd.
InternalName: Lege
FileVersion: 3.7.19.97
CompanyName: Nogebo Ltd.
LegalTrademarks:
ProductName: Sonamefe Nebat
ProductVersion: 2.4.42.84
FileDescription:
OriginalFilename: Lege.exe

Malware.AI.1936256435 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005393151 )
LionicAdware.Win32.DealPly.2!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.120124
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.bd02f681
K7GWAdware ( 005393151 )
Cybereasonmalicious.c73929
CyrenW32/DealPly.U.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.WC potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:AdWare.Win32.DealPly.dkftl
BitDefenderAdware.DealPly.2.Gen
NANO-AntivirusRiskware.Win32.DealPly.feiffk
MicroWorld-eScanAdware.DealPly.2.Gen
TencentMalware.Win32.Gencirc.10c95792
Ad-AwareAdware.DealPly.2.Gen
SophosDealPly Updater (PUA)
ComodoMalware@#11xee4ownvrjx
BitDefenderThetaAI:Packer.3A14BAC819
VIPRETrojan.Win32.Generic!BT
TrendMicroAdware.Win32.DEALPLY.SMD
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
FireEyeGeneric.mg.0fdc48ec73929765
EmsisoftAdware.DealPly.2.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.ixjg
AviraHEUR/AGEN.1125473
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2697DB3
MicrosoftTrojan:Win32/Occamy.C
SUPERAntiSpywarePUP.DealPly/Variant
GDataAdware.DealPly.2.Gen
AhnLab-V3PUP/Win32.DealPly.R329057
Acronissuspicious
McAfeeArtemis!0FDC48EC7392
MAXmalware (ai score=100)
VBA32Adware.DealPly
MalwarebytesMalware.AI.1936256435
PandaTrj/Genetic.gen
TrendMicro-HouseCallAdware.Win32.DEALPLY.SMD
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.DealPly!AKS4AJfhbxk
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agen.0754!tr
AVGWin32:DealPly-AJ [Adw]

How to remove Malware.AI.1936256435?

Malware.AI.1936256435 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment