Malware

Should I remove “Malware.AI.250516406”?

Malware Removal

The Malware.AI.250516406 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.250516406 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
bitbucket.org

How to determine Malware.AI.250516406?


File Info:

crc32: 5267979B
md5: 77f992d3c43eb010da1a47a9e659b3a9
name: 77F992D3C43EB010DA1A47A9E659B3A9.mlw
sha1: ae8fc86eb9fb10314f2cb6bb771e63f8d02d97fd
sha256: 2c9941026ccd2699d61ab7eca50203b3b559f4d147193b0f5833f4d7ea2cf0a2
sha512: a2b8ba7d004f4ac1539ad6976462d9597a29c40f720ccca068a394b3c0702f2c8b38db929f06895e61c5a85ef3fc9c772cc25bd6eebc3e498545950b5cfb0bdf
ssdeep: 3072:ZsnWcl0dCIIih1kkG1xb6nm/Vh6Oe+j6xwA0fovWx3:Clvfotk6Oi+wvWx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.250516406 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan-Downloader ( 0052b7dd1 )
LionicTrojan.Multi.Generic.4!c
CynetMalicious (score: 99)
ALYacGen:Variant.Doina.20047
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7GWTrojan-Downloader ( 0052b7dd1 )
Cybereasonmalicious.3c43eb
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Small.AYO
APEXMalicious
AvastFileRepMalware
KasperskyTrojan.Win32.Miner.twky
BitDefenderGen:Variant.Doina.20047
NANO-AntivirusTrojan.Win32.Miner.ezfzdc
MicroWorld-eScanGen:Variant.Doina.20047
TencentWin32.Trojan.Miner.Akzh
Ad-AwareGen:Variant.Doina.20047
SophosMal/Generic-S
ComodoMalware@#3kce42wej01ft
BitDefenderThetaGen:NN.ZexaF.34170.iuW@amlDcwii
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.77f992d3c43eb010
EmsisoftGen:Variant.Doina.20047 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1103440
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.252B67D
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Doina.D4E4F
GDataGen:Variant.Doina.20047
AhnLab-V3Malware/Win32.Generic.C2451973
McAfeeArtemis!77F992D3C43E
MAXmalware (ai score=96)
MalwarebytesMalware.AI.250516406
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.97 (RDML:kxfAMrUFxohMxuMAKgOeaQ)
YandexTrojan.GenAsa!dTBDFtxZGKo
IkarusTrojan-Downloader.Win32.Small
FortinetW32/Small.AYO!tr.dldr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Malware.AI.250516406?

Malware.AI.250516406 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment