Malware

Malware.AI.3251962879 removal guide

Malware Removal

The Malware.AI.3251962879 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3251962879 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Detected script timer window indicative of sleep style evasion
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.3251962879?


File Info:

crc32: 98C4E1D2
md5: b10fa1faad52156f0c37ba2c4dff5923
name: B10FA1FAAD52156F0C37BA2C4DFF5923.mlw
sha1: e09d345902ca2e4b5b8d64a09ae02b747981ac1c
sha256: 27aa03e43800ec1eb9434ea4a3cee275b18b93a0ea548735b5cfb348954f9fba
sha512: 2d8f1f5187082fdb90352de110c3f1ddef46e6cd0859dc05cfeda1d0113b3057a8547c23f8d3a7b61771625bd98f46e12450efba5e70a77be4ccaf1486afebb5
ssdeep: 3072:97DhdC6kzWypvaQ0FxyNTBf/c4ccjXFJ/uIes08BxRoCKScIIEleeBfM:9BlkZvaF4NTBncfcv/uIes08BxRoCKSE
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Decency
FileVersion: 0.0.0.4
CompanyName: Decency
ProductName: Latency Promote Editor
ProductVersion: 0.0.0.4
FileDescription: Promote editor for your latency
OriginalFilename: Latency Promote Editor
Translation: 0x0000 0x04e4

Malware.AI.3251962879 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Encoder.trrL
CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericPMF.S3697681
ALYacTrojan.GenericKD.46564964
CylanceUnsafe
SangforRiskware.Win32.Wacapew.C
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.902ca2
CyrenW32/Trojan.DRVN-5422
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
BitDefenderTrojan.GenericKD.46564964
MicroWorld-eScanTrojan.GenericKD.46564964
Ad-AwareTrojan.GenericKD.46564964
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34050.mu0@aSWw9sc
TrendMicroTROJ_GEN.R067C0PG721
McAfee-GW-EditionBehavesLike.Win32.Ransom.ch
FireEyeGeneric.mg.b10fa1faad52156f
EmsisoftTrojan.GenericKD.46564964 (B)
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.2B9E7F9
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Generic.D2C68664
GDataTrojan.GenericKD.46564964
AhnLab-V3Trojan/Win.Generic.R429882
McAfeeRDN/Generic.grp
MAXmalware (ai score=80)
MalwarebytesMalware.AI.3251962879
TrendMicro-HouseCallTROJ_GEN.R067C0PG721
RisingTrojan.Generic@ML.100 (RDML:DAu1duRZgEMv+LN4vS8Rgw)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.3251962879?

Malware.AI.3251962879 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment