Malware

Malware.AI.3008806943 removal tips

Malware Removal

The Malware.AI.3008806943 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3008806943 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • A process was set to shut the system down when terminated
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

bedron.ddns.net

How to determine Malware.AI.3008806943?


File Info:

crc32: 10B804E0
md5: 55676c2fe1b7fc8f73519fdb17691415
name: 55676C2FE1B7FC8F73519FDB17691415.mlw
sha1: 0844585ec2341fcf73942503933675745907a453
sha256: 20dc39740866a391bd504b6609fb519b598c1c76c13dc8833a01a299402c51e1
sha512: 094515fd97867313803d45b80089ba4f078e0ad7870bc6d7ba568720fa896440e1ea6170cfdd1944f7827a634542cfdf355eb59d294299cb703eb87e396e7bdc
ssdeep: 6144:Y6lNh6hnjcEkMpGBgtGgcy6EHSPj8KGWVmfud2:NljrXMpGetGgcVEHSrfBeQ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Malware.AI.3008806943 also known as:

K7AntiVirusTrojan ( 700000121 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Variant.Razy.774244
CylanceUnsafe
ZillyaDropper.Agent.Win32.157405
SangforTrojan.Win32.Kazy.417281
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 700000121 )
Cybereasonmalicious.fe1b7f
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.CBY
APEXMalicious
AvastFileRepMetagen [Malware]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.774244
NANO-AntivirusTrojan.Win32.Kazy.fgvcud
MicroWorld-eScanGen:Variant.Razy.774244
TencentWin32.Trojan-dropper.Agent.Suxr
Ad-AwareGen:Variant.Razy.774244
SophosMal/Generic-S + Mal/MSIL-RD
ComodoMalware@#q2xlw86irq73
BitDefenderThetaGen:NN.ZemsilF.34294.smW@aqT92vd
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.55676c2fe1b7fc8f
EmsisoftGen:Variant.Razy.774244 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.MSIL.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.B01FF8
KingsoftWin32.Troj.Agent.le.(kcloud)
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.Razy.DBD064
GDataGen:Variant.Razy.774244
Acronissuspicious
McAfeeArtemis!55676C2FE1B7
MAXmalware (ai score=82)
MalwarebytesMalware.AI.3008806943
PandaTrj/CI.A
YandexTrojan.DR.Agent!hSGCAnKwumE
IkarusTrojan.MSIL.MultiPacked
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.LEQL!tr
AVGFileRepMetagen [Malware]

How to remove Malware.AI.3008806943?

Malware.AI.3008806943 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment