Categories: Malware

Malware.AI.2685010496 removal tips

The Malware.AI.2685010496 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2685010496 virus can do?

Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.2685010496?


File Info:
name: 62F5F909E21A17B74C5C.mlwpath: /opt/CAPEv2/storage/binaries/5e16f71ee4893ccc63eeec622a259b90c89656234d49250adaeece6ee59297e7crc32: A1D5FAA7md5: 62f5f909e21a17b74c5c8e066fd54dcfsha1: e3c9c853f3734f9d00e03520b0615624b08a5f95sha256: 5e16f71ee4893ccc63eeec622a259b90c89656234d49250adaeece6ee59297e7sha512: 5bffe424db593f66a20fd4a26e91650e227465164c2e40e3858516d05cec707091e0df3c9aa1b575512e0ea44314ccdeb2c9416dcf2938d233a6dabaeb79f733ssdeep: 6144:WMjmdzggODCU6p1fPc28M9tP8qJT8AJodQgxjfEN15:WMGggODz6ptPc29WVWQQgxjfU15type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C594CF1273E1C873D35600724ED59BBEB3B6F9514E228B8363C07B1DED319A2963E265sha3_384: 1cbacbb8dbe36dc6bd80326ab58255e10b20a910c1bda13af3fc6386f732df7b60e4e197edce5e8ba3a52086f1f7e451ep_bytes: 558bec6aff68a8ed420068500e410064timestamp: 2010-05-21 09:35:46
Version Info:
Comments: CompanyName: FileDescription: FileVersion: InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: PrivateBuild: ProductName: ProductVersion: SpecialBuild: Translation: 0x0804 0x04b0

Malware.AI.2685010496 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Mikey.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mikey.151836
FireEye	Generic.mg.62f5f909e21a17b7
Skyhigh	BehavesLike.Win32.Infected.gh
ALYac	Gen:Variant.Mikey.151836
Malwarebytes	Malware.AI.2685010496
VIPRE	Gen:Variant.Mikey.151836
Sangfor	Trojan.Win32.Agent.Vuui
Alibaba	Trojan:Win32/Newix.cec6347b
CrowdStrike	win/malicious_confidence_70% (D)
Arcabit	Trojan.Mikey.D2511C
VirIT	Trojan.Win32.Generic.AKGS
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Mikey.151836
NANO-Antivirus	Riskware.Win32.Plugin.egysjo
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.13f611f9
Emsisoft	Gen:Variant.Mikey.151836 (B)
F-Secure	Trojan.TR/Dldr.Newix.E
DrWeb	Adware.Plugin.431
Zillya	Adware.BrowseFox.Win32.269464
TrendMicro	TROJ_GEN.R03BC0PJM23
Sophos	Mal/Generic-S
Webroot	W32.Malware.Gen
Varist	W32/S-2788572f!Eldorado
Avira	TR/Dldr.Newix.E
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE.1GOXSZ4
Google	Detected
AhnLab-V3	Trojan/Win.KY.C5501777
McAfee	GenericRXAS-KY!62F5F909E21A
VBA32	Adware.Plugin
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0PJM23
Rising	Trojan.Generic@AI.89 (RDML:dd5w5DxaOAq22NniMyKTZA)
Yandex	Trojan.GenAsa!XARHUAe6Z/k
Ikarus	Trojan.Win32
MaxSecure	Trojan.Malware.218231132.susgen
Fortinet	Riskware/Application
BitDefenderTheta	Gen:NN.ZexaF.36792.Aq0@aGV8!5kb
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.3f3734
DeepInstinct	MALICIOUS