Malware

Malware.AI.2513775 removal tips

Malware Removal

The Malware.AI.2513775 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2513775 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.2513775?


File Info:

crc32: D448CF98
md5: 6a9b37d2a1f1285e18e6c83b40ad60a9
name: 6A9B37D2A1F1285E18E6C83B40AD60A9.mlw
sha1: b0464c09dd92a65a4db481b9478a645b59df79a4
sha256: 1869638960b0cc5bee9f9ccbc80c944e3e22fddc29e8bda14cb14c34c2570188
sha512: 5ccc54a6f811c0ac235f53aa3dbefd048b594b4d9ed4d3085b690ea5b898903ef127cc391787e50d54ac9efc453a860fa0b3970026bb51c2ffa14a4ca549eab8
ssdeep: 12288:EJPajvZ8j5TXCfYt4I4kXHTWOIW9+Vg8PqEDFKBU/xbDlzuV4XuvBep:ceh85XCfYtvXHSOb0gYtFKyFkA1
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017
Assembly Version: 1.0.0.0
InternalName: Stubber.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Stubber
ProductVersion: 1.0.0.0
FileDescription: Stubber
OriginalFilename: Stubber.exe

Malware.AI.2513775 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.MSIL.Krypt.2
FireEyeGeneric.mg.6a9b37d2a1f1285e
McAfeeGenericRXNC-CC!6A9B37D2A1F1
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 004b932b1 )
BitDefenderGen:Heur.MSIL.Krypt.2
K7GWTrojan ( 004b932b1 )
Cybereasonmalicious.2a1f12
BitDefenderThetaGen:NN.ZemsilF.34804.5m3@a0JtLzb
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastMSIL:GenMalicious-BJT [Trj]
ClamAVWin.Packed.Zusy-6820870-0
NANO-AntivirusRiskware.Win32.Krypt.enrcqw
RisingHackTool.Injector!8.1E2 (TFE:C:bivFmjdEtYD)
Ad-AwareGen:Heur.MSIL.Krypt.2
EmsisoftGen:Heur.MSIL.Krypt.2 (B)
ComodoMalware@#1knh3y137ed2l
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.PackedNET.517
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
SophosML/PE-A + Mal/MSIL-SF
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.MSIL.bxca
AviraTR/Dropper.Gen
MAXmalware (ai score=81)
Antiy-AVLRiskWare[RiskTool]/MSIL.Dnonet
MicrosoftVirTool:MSIL/Injector.ED
ArcabitTrojan.MSIL.Krypt.2
GDataGen:Heur.MSIL.Krypt.2
CynetMalicious (score: 100)
ALYacGen:Heur.MSIL.Krypt.2
MalwarebytesMalware.AI.2513775
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/Injector.EKG
TencentMalware.Win32.Gencirc.10bb4359
YandexTrojan.Injector!D0B1fno8ibs
IkarusRiskTool.MSIL.Dnonet
FortinetMSIL/Injector.CMQ!tr
AVGMSIL:GenMalicious-BJT [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Virus.RiskTool.21f

How to remove Malware.AI.2513775?

Malware.AI.2513775 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment