Malware

Malware.AI.3299374578 (file analysis)

Malware Removal

The Malware.AI.3299374578 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3299374578 virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.3299374578?


File Info:

crc32: 46272A24
md5: 290b703e73c1236562a6e1c5d85dc0b2
name: 290B703E73C1236562A6E1C5D85DC0B2.mlw
sha1: 137f3a3548c01a28e1a5036b1d9a7671d93dbdaa
sha256: 0974f12e0bbf27c8a036cfaa45877d1855de291f69461ca94f89d5c9a0ce8417
sha512: a372c0b37738c0d72b5b6bc2d6f3660c12a5c0ca9f145b128550d635284c222c54218ed584aea0d7bbd74e0293aa9ae38ccc7f6dfe80a0302701e58e6aac5a34
ssdeep: 24576:cLike8AJNiY52i1Kls490DsRSS3LYh1nBMSq+vBpZAE/Iufmr22EU8SiYE38CkM:cWk8fPtIRK1nWSV5hIxr2hTSiYEt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName: Desib
FileVersion: 3.8.2.63
CompanyName: Loguh Ltd.
LegalTrademarks:
ProductName: Beronohi Goles
ProductVersion: 1.7.36.8
FileDescription:
OriginalFilename: DesibNohugeb.exe

Malware.AI.3299374578 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005497bb1 )
LionicAdware.Win32.DealPly.2!c
Elasticmalicious (high confidence)
MicroWorld-eScanAdware.DealPly.1.Gen
CylanceUnsafe
ZillyaAdware.DealPly.Win32.459059
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.69220877
K7GWAdware ( 005497bb1 )
Cybereasonmalicious.e73c12
CyrenW32/DealPly.BS.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.QY potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.DealPly.gen
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusVirus.Win32.Gen.ccmw
TencentMalware.Win32.Gencirc.114cddc8
Ad-AwareAdware.DealPly.1.Gen
SophosDealPly Updater (PUA)
ComodoMalware@#2hshecvqh91nt
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.vh
FireEyeAdware.DealPly.1.Gen
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Genome.aecv
AviraHEUR/AGEN.1104226
eGambitUnsafe.AI_Score_50%
Antiy-AVLTrojan/Generic.ASMalwS.25C71F2
MicrosoftTrojan:Win32/Occamy.C
GDataAdware.DealPly.1.Gen
AhnLab-V3PUP/Win32.DealPly.C3859336
Acronissuspicious
McAfeePUP-XEN-HH
MAXmalware (ai score=99)
VBA32Adware.DealPly
MalwarebytesMalware.AI.3299374578
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.DealPly!UyS3Bino7NI
IkarusPUA.DealPly
MaxSecureTrojan.Malware.12132270.susgen
FortinetW32/AGEN.1033829!tr
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.3299374578?

Malware.AI.3299374578 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment