Malware.AI.2184529585 removal guide

The Malware.AI.2184529585 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2184529585 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.2184529585?


File Info:
crc32: 7EA1CE79
md5: 62efa966c30d53b2ebb150f6b9d62f18
name: 62EFA966C30D53B2EBB150F6B9D62F18.mlw
sha1: d8644733e762b7cffade3f3d18c86083d6522371
sha256: 65a7d15e0ab5bb690fb5c7f8ea9691cfe031a8d64f9807cf2928b33e4206675e
sha512: a3ebde6dca38d3f489d45c1f0144c25fe29732434ab4a9a801e99ff30f9821915cf90aa65b193cdaca860dbc75236745ecd564dfdc3609b32ea201d0f81db7f9
ssdeep: 49152:T8SgFs8EmU99ou7fZTvxWKeuTT7RAWpGucqaopK0yQacO:T8SgFslT77xTvxWKeurR2HqaCO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: PatchUi.exe
FileVersion: 2, 0, 3, 1023
CompanyName: x98d8x4e91x9601x5b98x65b9x8bbax575b
Comments: Www.ChinaPYG.CoM
ProductName: PatchUi
ProductVersion: 2, 0, 3, 1023
FileDescription: Baymax Patcher Tools
OriginalFilename: PatchUi.exe
Translation: 0x0409 0x04b0

Malware.AI.2184529585 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Hacktool.Application
ALYac	Gen:Variant.Zusy.355288
Cylance	Unsafe
Zillya	Trojan.DllInject.Win32.6520
Sangfor	Trojan.Win32.Tapxamy.A
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Baymax.135
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6c30d5
Cyren	W32/Injector.AFN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/DllInject.IZ potentially unsafe
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Zusy.355288
MicroWorld-eScan	Gen:Variant.Zusy.355288
Ad-Aware	Gen:Variant.Zusy.355288
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	GenericRXLI-GW!74F79438EFC3
FireEye	Generic.mg.62efa966c30d53b2
Emsisoft	Gen:Variant.Zusy.355288 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Tapxamy.A
Gridinsoft	Trojan.Win32.Downloader.oa!s1
Arcabit	Trojan.Zusy.D56BD8
AegisLab	Trojan.Win32.Zusy.4!c
GData	Gen:Variant.Zusy.355288
AhnLab-V3	Malware/Win32.Generic.C3157926
McAfee	GenericRXAA-AA!62EFA966C30D
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Wintrim
Malwarebytes	Malware.AI.2184529585
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DD321
Rising	Trojan.HijcLpk!1.998A (CLOUD)
Yandex	Trojan.GenAsa!xdhYXBH2h8s
Ikarus	PUA.DllInject
Fortinet	Riskware/DllInject
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Malware.AI.2184529585?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.2184529585 removal guide