Malware

Malware.AI.1940821874 malicious file

Malware Removal

The Malware.AI.1940821874 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1940821874 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself

Related domains:

pastebin.com
ocsp.digicert.com

How to determine Malware.AI.1940821874?


File Info:

crc32: 885293F0
md5: 4ad10d6374e78f6ebede09a2b1292ee7
name: 4AD10D6374E78F6EBEDE09A2B1292EE7.mlw
sha1: a832a287e4a9ac9e3e222fc92adfc1b8ba8811e5
sha256: 5fc90880d47acfb53193898157312a066cd01dc425829bd6e174e814f82ce51b
sha512: 4655d5d6121c3952168286b33186e8a37d580a1402611a50a7bf8e7178e415a9376b71361d07231c2d72d973a770a67a5e6025ed5c8511ad50fb4a9dacad8c18
ssdeep: 24576:qcLCREtZtLUzHz0ZlBSIL41nihBNPsJ0/obc4ajOS9010O2SkKuyD:JLCREFUjz0BSuc+gvbRayCAlkKd
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Malware.AI.1940821874 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00574b221 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.41883
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.J1
ALYacGen:Variant.Symmi.93251
CylanceUnsafe
ZillyaTrojan.Generic.Win32.95167
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.d5619043
K7GWTrojan ( 00574b221 )
Cybereasonmalicious.374e78
CyrenW32/Zusy.EM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HHBK
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Razy-6724271-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.93251
NANO-AntivirusTrojan.Win32.Kryptik.ffmvri
MicroWorld-eScanGen:Variant.Symmi.93251
TencentTrojan.Win32.Kryptik.gify
Ad-AwareGen:Variant.Symmi.93251
SophosMal/Generic-S + Mal/Inject-GJ
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderThetaAI:Packer.195ED6F91E
McAfee-GW-EditionBehavesLike.Win32.Sytro.tc
FireEyeGeneric.mg.4ad10d6374e78f6e
EmsisoftGen:Variant.Symmi.93251 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.goptw
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASBOL.C62E
MicrosoftVirTool:Win32/CeeInject.AKZ!bit
SUPERAntiSpywareTrojan.Agent/Generic
GDataGen:Variant.Symmi.93251
TACHYONTrojan/W32.Selfmod
AhnLab-V3Trojan/Win32.CeeInject.R237891
Acronissuspicious
McAfeePacked-FJB!4AD10D6374E7
MAXmalware (ai score=99)
VBA32Trojan.Packed
MalwarebytesMalware.AI.1940821874
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.GenAsa!0xM7zILK7cg
IkarusTrojan.Patched
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Zusy.304525!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.1940821874?

Malware.AI.1940821874 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment