Malware

Malware.AI.3421010578 malicious file

Malware Removal

The Malware.AI.3421010578 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3421010578 virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (255 unique times)
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Attempts to repeatedly call a single API many times in order to delay analysis time

How to determine Malware.AI.3421010578?


File Info:

crc32: C126F5CD
md5: 290c7dfb01e50cea9e19da81a781af2c
name: 290C7DFB01E50CEA9E19DA81A781AF2C.mlw
sha1: 8a52c7645ec8fd6c217dfe5491461372acc4e849
sha256: 53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22
sha512: be2f45b5cc110bc9c4e61723eb111e53d70f3e32757915a9a945589a5296e3a667afdf5978f7002869005f961d705058ffafd2076d44471b7826237c76e11d4d
ssdeep: 3072:iZ0eFVz8q3Ab6BNx6GmZd9WAT4uY59oVU9FLBD9VK+gvPXCX8l9:i+eFVz8qTz6GmZjBUuC9HJDTKGY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.3421010578 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Variant.Zusy.356529
CylanceUnsafe
SangforTrojan.Win32.Save.a
Cybereasonmalicious.b01e50
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Conti.K
APEXMalicious
AvastWin32:Conti-B [Ransom]
ClamAVWin.Ransomware.Conti-9826703-0
BitDefenderGen:Variant.Zusy.356529
MicroWorld-eScanGen:Variant.Zusy.356529
Ad-AwareGen:Variant.Zusy.356529
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34050.luW@aywU67ki
TrendMicroRansom.Win32.CONTI.SMTH.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.290c7dfb01e50cea
EmsisoftGen:Variant.Zusy.356529 (B)
JiangminTrojan.Generic.dzzcl
AviraHEUR/AGEN.1138121
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/CONTI.DC!MTB
GDataGen:Variant.Zusy.356529
AhnLab-V3Ransomware/Win.Conti.R372647
McAfeeGenericRXNC-DC!290C7DFB01E5
MAXmalware (ai score=87)
VBA32BScope.TrojanRansom.Cryptor
MalwarebytesMalware.AI.3421010578
TrendMicro-HouseCallRansom.Win32.CONTI.SMTH.hp
RisingRansom.Conti!1.D637 (CLASSIC)
IkarusTrojan-Ransom.Conti
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Conti.F!tr.ransom
AVGWin32:Conti-B [Ransom]
Qihoo-360HEUR/QVM20.1.D967.Malware.Gen

How to remove Malware.AI.3421010578?

Malware.AI.3421010578 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment