Categories: Malware

How to remove “Malware.AI.3160907097”?

The Malware.AI.3160907097 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3160907097 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates running processes
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Malware.AI.3160907097?


File Info:
name: FD13121034AB6F845379.mlwpath: /opt/CAPEv2/storage/binaries/3205d6be9ebe12456927a6cb6b28f9964d35743870a4b57b26c38d31aa8b6b10crc32: D6B37720md5: fd13121034ab6f8453791124cd4456d9sha1: 8b1478b481cfd0a11ddc2c3289a02734ac74b53fsha256: 3205d6be9ebe12456927a6cb6b28f9964d35743870a4b57b26c38d31aa8b6b10sha512: 5fc16f4a516a0814d920625c2e9e09763e7a5400e830a58f2764eb5d9b5f1fc57cd62e24dabd16583da46892d78773875bfc06a9eb6049148094eaeb13032959ssdeep: 24576:8sg78aMyZgWhOzMZsHr0b/MUDjkLOMoIr:a7BBZawb/MKoLb7rtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14435F86131F0C0ABE7A107B03EAA7611646A7C9027A547CF7E463E395B33781352D7AEsha3_384: a3834de10b20ceff73a683e346d2c131ab74105c8cc3be27e9d65c8d82461dfae2a5e5c7c290d29c8d152c75ed3b7b2bep_bytes: e811050000e97afeffff558bec56ff75timestamp: 2021-04-21 17:39:24
Version Info:
CompanyName: InitexFileDescription: Proxy CheckerFileVersion: 1.53.0.1InternalName: ProxyChecker.exeLegalCopyright: Copyright © 2006-2018 InitexOriginalFilename: ProxyChecker.exeProductName: ProxifierProductVersion: 3.42.0.1Translation: 0x0409 0x04e4

Malware.AI.3160907097 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Zusy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.379112
FireEye	Generic.mg.fd13121034ab6f84
McAfee	GenericRXOI-AJ!FD13121034AB
Cylance	Unsafe
K7AntiVirus	Trojan-Downloader ( 0058ad111 )
Alibaba	TrojanDownloader:Win32/Khalesi.b2df0f5a
K7GW	Trojan-Downloader ( 0058ad111 )
BitDefenderTheta	Gen:NN.ZexaF.34294.dv0@am6sL!mk
Cyren	W32/Satacom.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Satacom.N
TrendMicro-HouseCall	TROJ_GEN.R002C0PKN21
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan.Win32.Khalesi.gen
BitDefender	Gen:Variant.Zusy.379112
Tencent	Win32.Trojan.Zusy.Ednf
Ad-Aware	Gen:Variant.Zusy.379112
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0PKN21
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Emsisoft	Gen:Variant.Zusy.379112 (B)
Paloalto	generic.ml
GData	Gen:Variant.Zusy.379112
Jiangmin	Trojan.Agentb.hkr
Avira	TR/Redcap.zesxf
Antiy-AVL	Trojan/Generic.ASMalwS.34D7A0D
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4408036
VBA32	BScope.TrojanPSW.Stealer
ALYac	Gen:Variant.Zusy.379112
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.3160907097
APEX	Malicious
Yandex	Trojan.Khalesi!XS6g3+REyUI
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Satacom.L!tr
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)