Malware

Malware.AI.3054563921 malicious file

Malware Removal

The Malware.AI.3054563921 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3054563921 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
hi.baidu.com
infoflow.baidu.com
ocsp.globalsign.com
ocsp2.globalsign.com
a.tomx.xyz

How to determine Malware.AI.3054563921?


File Info:

crc32: 6DAFAD0A
md5: 2774b2336eda940065f11583b496f46e
name: 2774B2336EDA940065F11583B496F46E.mlw
sha1: 80a5d20dfb303b428ef4ad8134ec265265b6fdd6
sha256: 15a53e5cb83f9f697fee866387cefa57b092c5c866979eaa6c07117779909e9a
sha512: 8dadb88463735969ae9189f7ad714d888372c2b0e1ff6635c4222eba71427b28d463664d9c5e00051b92a105f62e77cda783e3c4a9f6c88b928c7c10921661b0
ssdeep: 24576:K9y/69neEKlV/nKlYSGyJL5wEOYK9ZwWS:J/69eEOFKn59KnwWS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: TODO: (C) x3002x4fddx7559x6240x6709x6743x5229x3002
InternalName: d3demo.exe
FileVersion: 1.0.0.1
CompanyName: TODO:
ProductName: TODO:
ProductVersion: 1.0.0.1
FileDescription: TODO:
OriginalFilename: d3demo.exe
x7ffbx8bd1: 0x0804 0x03a8

Malware.AI.3054563921 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0057f6c71 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebWin32.HLLP.Siggen.54
CynetMalicious (score: 100)
CAT-QuickHealWin95.SK
ALYacGen:Variant.Mikey.50819
CylanceUnsafe
ZillyaTrojan.Black.Win32.47209
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0057f6c71 )
Cybereasonmalicious.36eda9
CyrenW32/S-428f2b84!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Patched.IW
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Midie-9866886-0
KasperskyHEUR:Exploit.Win32.Shellcode.gen
BitDefenderGen:Variant.Mikey.50819
NANO-AntivirusTrojan.Win32.Dwn.edishf
MicroWorld-eScanGen:Variant.Mikey.50819
TencentMalware.Win32.Gencirc.10b08f2e
Ad-AwareGen:Variant.Mikey.50819
SophosMal/Generic-S + Troj/Patched-BS
ComodoTrojWare.Win32.Bitrep.IW@7mfe0x
BitDefenderThetaGen:NN.ZexaF.34170.!80@a8qV2Tcb
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.2774b2336eda9400
EmsisoftGen:Variant.Mikey.50819 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.NSIS.dc
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASMalwS.18E5A29
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmHEUR:Exploit.Win32.Shellcode.gen
GDataGen:Variant.Mikey.50819
AhnLab-V3Malware/Win32.Generic.C1994295
Acronissuspicious
McAfeePacked-FAQ!2774B2336EDA
MAXmalware (ai score=81)
VBA32TrojanDownloader.Adload
MalwarebytesMalware.AI.3054563921
PandaTrj/CI.A
RisingTrojan.Patch!1.B0CA (CLASSIC)
YandexTrojan.GenAsa!d2Yb7KGxJx0
IkarusTrojan-Downloader.Adload
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Patched.IW!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.3054563921?

Malware.AI.3054563921 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment