Malware.AI.3132549479 malicious file

The Malware.AI.3132549479 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3132549479 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The executable is likely packed with VMProtect
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.3132549479?


File Info:
crc32: 960B7EC4
md5: e943a59958c961c349f146a17ae44800
name: E943A59958C961C349F146A17AE44800.mlw
sha1: af278a0307c9a8230846d0de53617d5e5136bd41
sha256: 215d79b7b2ac840d3124696da7742ccb91d36d6555d1d6c1a88fd80200cdb945
sha512: b57addf2799488f24f08703a71150bf558eea56947df55804deef3af423559e44171cbff573e7ae43446fe4eaa324f70dbb1836771c510419c16d98732a174a8
ssdeep: 24576:euzVrR5EHslsoULVDg5HWDC3OziTBfMbfHOmPfEkc8iMB/O3S9BarvyesI6rRXvj:pzVrR5EHCZULBxMOzi9fdmPfEkLmSq7g
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) x7f8ex675cx6749x79d1x6280 2002-2008
InternalName: procservice.exe
FileVersion: 4.08
CompanyName: x7f8ex675cx6749x79d1x6280 - www.medusa1375.com
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: x4e3bx52a8x9632x5fa1x4e92x8054x7f51x7248xff0dx8fdbx7a0bx9632x5fa1x548cx5b89x5168x68c0x6d4b( Windows NT/2K/XP/2K3/VISTA)
SpecialBuild: 
ProductVersion: 4.08
FileDescription: Windows NT/2K/XP/2K3/VISTA x7cfbx7edfx5b89x5168x9632x5fa1
OriginalFilename: procservice.exe
Translation: 0x0409 0x04b0

Malware.AI.3132549479 also known as:

Lionic	Trojan.Win32.Hupigon.m!c
DrWeb	BackDoor.Pigeon.57042
MicroWorld-eScan	Trojan.Generic.2437160
ALYac	Trojan.Generic.2437160
Cylance	Unsafe
Zillya	Backdoor.Hupigon.Win32.23348
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/MalwareF.4e380765
Cybereason	malicious.958c96
Cyren	W32/Risk.HAOY-6626
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 99)
BitDefender	Trojan.Generic.2437160
NANO-Antivirus	Trojan.Win32.Pigeon.jrzrb
Tencent	Win32.Backdoor.Hupigon.Aket
Ad-Aware	Trojan.Generic.2437160
Sophos	Mal/Behav-156
Comodo	Malware@#2snuvkii0x4xt
BitDefenderTheta	Gen:NN.ZexaF.34294.@y1@aC3UrZab
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Injector.fh
FireEye	Generic.mg.e943a59958c961c3
Emsisoft	Trojan.Generic.2437160 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/LangRen.e
Webroot	W32.Backdoor.Gen
Avira	TR/Spy.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.1F79FE
Kingsoft	Win32.Hack.Huigezi.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.Generic.2437160
McAfee	Artemis!E943A59958C9
MAX	malware (ai score=100)
VBA32	Backdoor.Hupigon
Malwarebytes	Malware.AI.3132549479
Panda	Trj/Vilsel.AF
Yandex	Trojan.GenAsa!sJQkEYkj9EE
Ikarus	Backdoor.Win32.Hupigon
Fortinet	Malware_fam.A
AVG	Win32:Trojan-gen

How to remove Malware.AI.3132549479?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.3132549479 malicious file