Malware

How to remove “Malware.AI.2912474505”?

Malware Removal

The Malware.AI.2912474505 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2912474505 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings

How to determine Malware.AI.2912474505?


File Info:

crc32: D81B4A6D
md5: bcf4a541f6084949ce149ef1f76abaf1
name: BCF4A541F6084949CE149EF1F76ABAF1.mlw
sha1: 2f96a122c86fd1390baaff350cdc6ff6955a2e29
sha256: 23a852b3a6d4a2be1e8a8107841cdbca05d1cf067c15323e64be18d7ee85e9ed
sha512: de4a54ebc59c3591078efc90fec6da758ff0750281a6712eaeeea449fa96a9465edcc850d97b3674719bbba7a67dfd4362d3d01bbdeb7c9621e23c64c1405341
ssdeep: 6144:AQdDHC2PuGjoW40uOcT9i3oJJvZ4aqHX8D/zva7vwppz:jL1uGsCuOcA3mlWiza7Sz
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyrightxa9 2017-2012 Luxoft Though, Inc.
InternalName: eveninggentle.exe
CompanyName: Luxoft Though
ProductName: Exceptthick
ProductVersion: 9.7.75.51
FileDescription: Exceptthick
OriginalFilename: eveninggentle.exe
Translation: 0x0409 0x04b0

Malware.AI.2912474505 also known as:

K7AntiVirusSpyware ( 00538dab1 )
LionicTrojan.Win32.Ursnif.4!c
DrWebTrojan.PWS.Banker1.28481
ClamAVWin.Malware.Generic-6756222-0
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Agent.DJDI
MalwarebytesMalware.AI.2912474505
ZillyaTrojan.Ursnif.Win32.3979
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaTrojanSpy:Win32/Ursnif.1fcf9dae
K7GWSpyware ( 00538dab1 )
Cybereasonmalicious.1f6084
CyrenW32/Ursnif.DI.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Spy.Ursnif.BW
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.DJDI
NANO-AntivirusTrojan.Win32.Ursnif.fkliwj
MicroWorld-eScanTrojan.Agent.DJDI
TencentMalware.Win32.Gencirc.10b5c6b6
Ad-AwareTrojan.Agent.DJDI
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanSpy.Ursnif.BA@82buwv
BitDefenderThetaGen:NN.ZexaF.34294.Aq0@aCL3xhci
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.URSNIF.SMAL01.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.gh
FireEyeGeneric.mg.bcf4a541f6084949
EmsisoftTrojan.Agent.DJDI (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Ursnif.bun
AviraHEUR/AGEN.1124559
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.29928A0
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Agent.DJDI
GDataTrojan.Agent.DJDI
TACHYONTrojan-Spy/W32.Ursnif.440320
AhnLab-V3Trojan/Win32.Ursnif.R245426
Acronissuspicious
VBA32BScope.TrojanSpy.Ursnif
MAXmalware (ai score=89)
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.URSNIF.SMAL01.hp
RisingTrojan.Generic@ML.98 (RDMK:pjHDt1565G26XleEXNdl/A)
YandexTrojan.GenAsa!iffvAwQZtMY
IkarusTrojan-Spy.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptij.CRRJ!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Malware.AI.2912474505?

Malware.AI.2912474505 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment