Categories: Malware

What is “Malware.AI.2814426267”?

The Malware.AI.2814426267 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2814426267 virus can do?

  • Drops a binary and executes it
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to identify installed AV products by installation directory
  • Attempts to identify installed AV products by registry key
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
a.tomx.xyz
nf.clickspring.net
cu.clickspring.net

How to determine Malware.AI.2814426267?


File Info:

crc32: D016B970md5: 3dde9b3ded9796a95929558a86fc36caname: 3DDE9B3DED9796A95929558A86FC36CA.mlwsha1: ac49e5c2f2ffa11dd0c4d7489ec148d2e6973691sha256: 4b1b56625e4452a0817b063a409e19c2c066f8c18d276216487f130d4927c6b7sha512: 705604fcb959eed21f129ac2ca0265a6b5bd3abd11542871b253cd099229cd59ceaaedb7827764cf1a28514efb62fcaf1179b7c3780025e5960e584c984da0e0ssdeep: 3072:X2SGEEgbl41lQF9TJgfIcAatKO0IxB59szrIk+6dI:X2S3r4HSSf5AatKO0SD6Jtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.2814426267 also known as:

Bkav W32.AIDetect.malware2
K7AntiVirus Adware ( 004bdf921 )
Elastic malicious (high confidence)
DrWeb Adware.ClickSpring
Cynet Malicious (score: 100)
CMC Generic.Win32.3dde9b3ded!MD
ALYac Gen:Variant.Adware.Barys.571
Malwarebytes Malware.AI.2814426267
Zillya Adware.PurityScan.Win32.618
Sangfor Trojan.Win32.Save.a
Alibaba Ransom:Win32/Blocker.20f9867e
K7GW Adware ( 004bdf921 )
Cybereason malicious.ded979
Cyren W32/Backdoor.GFLL-9175
Symantec Adware.Purityscan
ESET-NOD32 Win32/Adware.MediaTickets
APEX Malicious
Avast Win32:PurityScan-AB [Trj]
ClamAV Win.Dropper.Purityscan-2
Kaspersky Trojan-Ransom.Win32.Blocker.ilbq
BitDefender Gen:Variant.Adware.Barys.571
NANO-Antivirus Riskware.Win32.PurityScan.bpxap
MicroWorld-eScan Gen:Variant.Adware.Barys.571
Tencent Win32.Init.Purityscan.xle
Ad-Aware Gen:Variant.Adware.Barys.571
Sophos ClickSpring (PUA)
Comodo Application.Win32.Adware.MediaTickets@1u9l
BitDefenderTheta Gen:NN.ZexaF.34688.kmW@aqe!ypm
VIPRE PurityScan
TrendMicro Mal_PuriDL
FireEye Generic.mg.3dde9b3ded9796a9
Emsisoft Gen:Variant.Adware.Barys.571 (B)
SentinelOne Static AI – Suspicious PE
Jiangmin Adware/SpringClick.a
Avira HEUR/AGEN.1106571
Antiy-AVL Trojan/Generic.ASMalwS.31E3F
Kingsoft Win32.Troj.PuritySCAN.(kcloud)
Microsoft Trojan:Win32/Wacatac.B!ml
Arcabit Trojan.Adware.Barys.571
GData Gen:Variant.Adware.Barys.571
TACHYON Trojan-Clicker/W32.Agent.167936.EJ
AhnLab-V3 Trojan/Win32.Agent.R144511
McAfee GenericRXJH-VS!3DDE9B3DED97
MAX malware (ai score=99)
VBA32 Win32.Trojan.Dropper.Heur
Panda Trj/Genetic.gen
TrendMicro-HouseCall Mal_PuriDL
Rising Trojan.Clspring.a (CLOUD)
Yandex Trojan.GenAsa!A/KvHVnte5s
Ikarus Worm.Win32.Koobface
MaxSecure Trojan.Malware.110564413.susgen
Fortinet Adware/ClickSpring
AVG Win32:PurityScan-AB [Trj]

How to remove Malware.AI.2814426267?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

5 hours ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

5 hours ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

5 hours ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

5 hours ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

6 hours ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

6 hours ago