Malware

Malware.AI.3336675493 removal instruction

Malware Removal

The Malware.AI.3336675493 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3336675493 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Executed a process and injected code into it, probably while unpacking
  • Creates a hidden or system file
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.3336675493?


File Info:

crc32: 2F07D11B
md5: b3d4730290f6d743a7342295d297a947
name: B3D4730290F6D743A7342295D297A947.mlw
sha1: 426e4cbd3881b227b56e9d8ee2086dcd1c8384a0
sha256: 6f0ecfa853bfbbfdcd7f75b75430c97e92a573a06168fac49d40031237a0de6f
sha512: 7bfb8efd0ba8d83fe7fb05d853ce9dad0cf140ff70d127ce8826fd2a1ef3dea7848395dd5e231344f268ece061283b1dd287fed330adab23c510de6cc6117f88
ssdeep: 24576:sKzqPqBhdToyk7+OWHKPnz8eRQOLeFZN7eVxHy:sKZUP+6z8elLepevS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.3336675493 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004d5b9e1 )
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.2756
ClamAVWin.Trojan.Zbot-64354
CAT-QuickHealRansom.Crowti.WR2
ALYacTrojan.Zbot.IRW
MalwarebytesMalware.AI.3336675493
ZillyaTrojan.Agent.Win32.591409
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Kryptik.a803929d
K7GWTrojan ( 004d5b9e1 )
Cybereasonmalicious.290f6d
CyrenW32/Zbot.IBGH-4786
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.ECNR
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Agent.ihhn
BitDefenderTrojan.Zbot.IRW
NANO-AntivirusTrojan.Win32.Yakes.dygwai
ViRobotTrojan.Win32.Z.Agent.1062213
MicroWorld-eScanTrojan.Zbot.IRW
TencentMalware.Win32.Gencirc.10b0d986
Ad-AwareTrojan.Zbot.IRW
SophosML/PE-A + Mal/Kelihos-D
ComodoTrojWare.Win32.CryptoWall.CBE@60akkd
BitDefenderThetaGen:NN.ZexaF.34266.arZ@aCCMsTji
VIPREWin32.Malware!Drop
TrendMicroTROJ_KRYPTIK.XXTZA
McAfee-GW-EditionBehavesLike.Win32.Pykse.tc
FireEyeGeneric.mg.b3d4730290f6d743
EmsisoftTrojan.Zbot.IRW (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Diple.dpvp
AviraHEUR/AGEN.1128859
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.1558E0C
MicrosoftTrojan:Win32/DllCheck.A!MSR
ZoneAlarmTrojan.Win32.Agent.ihhn
GDataTrojan.Zbot.IRW
AhnLab-V3Trojan/Win32.Injector.R166751
Acronissuspicious
McAfeePWSZbot-FAKV!B3D4730290F6
MAXmalware (ai score=81)
VBA32Heur.Malware-Cryptor.Hlux
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_KRYPTIK.XXTZA
RisingTrojan.Generic@ML.92 (RDML:Cb8oYkhFyiYvPzNYItjRhw)
IkarusTrojan.Win32.Kelihos
FortinetW32/Kryptik.ECNR!tr
AVGWin32:Malware-gen

How to remove Malware.AI.3336675493?

Malware.AI.3336675493 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment