Malware

Malware.AI.3021496269 removal guide

Malware Removal

The Malware.AI.3021496269 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3021496269 virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.3021496269?


File Info:

crc32: CF2C5CDD
md5: 3a4d1dbd34d1ec908082f6812d7c9a0f
name: 3A4D1DBD34D1EC908082F6812D7C9A0F.mlw
sha1: 825a26f2de48f5004c2c9030967baa8052e42991
sha256: 0de567758bfc84a2fba3d5c6e86ac129c55df0d99fd916ead3268c83de245b03
sha512: fb70b41f5c2c523892b2dff8bfa3184d58fcf84f48ae9e52edcaa1e8ae2d66e296fdf2de6072230a1069d58e2b917c13b4d78c8c16aea38c483c1c3cee958956
ssdeep: 24576:mUhGkTP+XZNFx/DWjMGRtALaZMYkVglVH:NyX/fDoALaZMYkGXH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Don Quijote
InternalName: PP2.0_Confused.exe
FileVersion: 2.0.0.2
CompanyName: CGA
ProductName:
ProductVersion: 1.0.2.0
FileDescription:
OriginalFilename: PP2.0_Confused.exe
Translation: 0x0809 0x04b0

Malware.AI.3021496269 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43189
ClamAVWin.Dropper.Ramnit-7598149-0
ALYacGeneric.Ransom.Stampado.AF25EEDC
ZillyaTrojan.Keylogger.Win32.45882
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderGeneric.Ransom.Stampado.AF25EEDC
Cybereasonmalicious.d34d1e
SymantecML.Attribute.HighConfidence
ZonerTrojan.Win32.42096
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.Upatre.gen
AlibabaTrojanDownloader:Win32/Krypter.b6cc35d0
ViRobotTrojan.Win32.Agent.1789440
MicroWorld-eScanGeneric.Ransom.Stampado.AF25EEDC
TencentMalware.Win32.Gencirc.10b27f43
Ad-AwareGeneric.Ransom.Stampado.AF25EEDC
SophosMal/AuItInj-C
BitDefenderThetaGen:NN.ZexaF.34236.kv0@aaDoJ5ci
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.th
FireEyeGeneric.mg.3a4d1dbd34d1ec90
EmsisoftGeneric.Ransom.Stampado.AF25EEDC (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Autoit.fpo
WebrootW32.Dropper.Gen
AviraTR/Crypt.ZPACK.Gen4
eGambitGeneric.Malware
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitGeneric.Ransom.Stampado.AF25EEDC
GDataGeneric.Ransom.Stampado.AF25EEDC
McAfeeArtemis!3A4D1DBD34D1
MAXmalware (ai score=83)
VBA32TrojanDownloader.Agent
MalwarebytesMalware.AI.3021496269
RisingTrojan.Generic@ML.87 (RDML:GWL2Gj8Cs1rqVamzW80Qbg)
IkarusTrojan.Krypter
MaxSecureTrojan.Malware.101965461.susgen
FortinetW32/Generic.AC.35B9E4!tr

How to remove Malware.AI.3021496269?

Malware.AI.3021496269 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment