Malware

Malware.AI.250387146 removal tips

Malware Removal

The Malware.AI.250387146 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.250387146 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics

Related domains:

pastebin.com

How to determine Malware.AI.250387146?


File Info:

crc32: 3900F386
md5: 70a89367dafeca51790fe86585008a69
name: 70A89367DAFECA51790FE86585008A69.mlw
sha1: 0e9815902ed08c05b465459a9efb8c37dde2720e
sha256: dda9b8d5b95b7366815a4a9d3f1a4d8de4c458f4eb0eeb02cd5b5edf1fadfcac
sha512: 73e0bc82e91574bf8e14a1617b587eac4a9f9e5127215318f34afb88456e1138aef23357b9ffa8d8b9a67caadd676fee83a613d5904d5f1624fec2502aec82bd
ssdeep: 192:xL1qJlJcCtVWKnlYJLPLTNv3CPpj54V00h:xL1qJlJbgPzLTN6Ppj54V0e
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: L!ghtC.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: L!ghtC.exe

Malware.AI.250387146 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.215011
FireEyeGeneric.mg.70a89367dafeca51
ALYacGen:Variant.Bulz.215011
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.Bulz.215011
K7GWTrojan ( 700000121 )
Cybereasonmalicious.7dafec
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Generic
NANO-AntivirusTrojan.Win32.Agent.emwbss
Ad-AwareGen:Variant.Bulz.215011
EmsisoftGen:Variant.Bulz.215011 (B)
ComodoTrojWare.MSIL.Dynamer.CZF@7h7rvk
F-SecureHeuristic.HEUR/AGEN.1130328
DrWebTrojan.DownLoader23.60158
McAfee-GW-EditionGenericRXBH-CV!70A89367DAFE
MaxSecureTrojan.Malware.300983.susgen
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.auwsq
AviraHEUR/AGEN.1130328
MAXmalware (ai score=82)
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitTrojan.Bulz.D347E3
ZoneAlarmHEUR:Backdoor.MSIL.Generic
GDataGen:Variant.Bulz.215011
CynetMalicious (score: 85)
McAfeeGenericRXBH-CV!70A89367DAFE
VBA32Trojan.MSIL.Disfa
MalwarebytesMalware.AI.250387146
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.CZF
RisingDownloader.Agent!8.B23 (CLOUD)
YandexTrojan.DL.Agent!6hIMb4fDCZQ
IkarusTrojan-Downloader.MSIL.Agent
eGambitTrojan.Generic
FortinetMSIL/Kryptik.BHP!tr
BitDefenderThetaGen:NN.ZemsilF.34804.am0@auL57Kh
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_70% (D)
Qihoo-360Win32/Trojan.55f

How to remove Malware.AI.250387146?

Malware.AI.250387146 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment