Categories: Malware

Should I remove “Malware.AI.3644140855”?

The Malware.AI.3644140855 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3644140855 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

How to determine Malware.AI.3644140855?


File Info:
crc32: 92D11A15md5: 465a1e408a62595f7816397c3ae8bc0cname: 465A1E408A62595F7816397C3AE8BC0C.mlwsha1: e06725302fd995157dfb564fb3c058383d5678efsha256: dd2fde760c7f550d24f0b111ac6c203a701eeb837ba8e1edab4390b42c617779sha512: 5a219731371f38cebd6528aefd15749fc5b12eb46836b037ec9b5f7eef43935bd4f412129027ad658e216ebed5023993078a3eef84cfb3877c7973fe53977a56ssdeep: 384:wNWmM2rJgdYQSNv+wZKfc753VY1mpEdjqjnWJUe61zKf:BGLv+wj4qSJUe8zKftype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x7248x6743x6240x6709(C) 2015InternalName: KingFileVersion: 1, 0, 0, 1CompanyName:  PrivateBuild: LegalTrademarks: Comments: ProductName:   KingSpecialBuild: ProductVersion: 1, 0, 0, 1FileDescription: KingOriginalFilename: King.datTranslation: 0x0804 0x04b0

Malware.AI.3644140855 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Dropped:Generic.Malware.F!dld!.B0879FEE
FireEye	Generic.mg.465a1e408a62595f
McAfee	DoS-FAK!465A1E408A62
Cylance	Unsafe
VIPRE	BehavesLike.Win32.Malware.ssc (mx-v)
Sangfor	Malware
K7AntiVirus	Trojan ( 0040f8a91 )
BitDefender	Dropped:Generic.Malware.F!dld!.B0879FEE
K7GW	Trojan ( 0040f8a91 )
Cybereason	malicious.08a625
Cyren	W32/Trojan.QSIL-8831
Symantec	ML.Attribute.HighConfidence
TotalDefense	Win32/Nitol.A!generic
APEX	Malicious
Avast	Win32:ServStart-B [Trj]
ClamAV	Win.Trojan.Nitol-6335025-0
Kaspersky	HEUR:Trojan-DDoS.Win32.Nitol.gen
NANO-Antivirus	Trojan.Win32.Dwn.drafcv
Rising	Backdoor.Overie!1.64BD (CLASSIC)
Ad-Aware	Dropped:Generic.Malware.F!dld!.B0879FEE
Emsisoft	Dropped:Generic.Malware.F!dld!.B0879FEE (B)
Comodo	TrojWare.Win32.Magania.~AAC@f80ur
F-Secure	Heuristic.HEUR/Malware
DrWeb	Trojan.DownLoader12.57556
Zillya	Backdoor.CPEX.Win32.30687
TrendMicro	DDOS_NITOL_EL15018A.UVPM
McAfee-GW-Edition	DoS-FAK!465A1E408A62
Sophos	Mal/Generic-S
Jiangmin	Trojan/Generic.bdbfb
Avira	HEUR/Malware
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	DDoS:Win32/Nitol.B
Arcabit	Generic.Malware.F!dld!.BD36FFEE
ZoneAlarm	HEUR:Trojan-DDoS.Win32.Nitol.gen
GData	Dropped:Generic.Malware.F!dld!.B0879FEE
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R116112
BitDefenderTheta	AI:Packer.91F124461F
ALYac	Dropped:Generic.Malware.F!dld!.B0879FEE
MAX	malware (ai score=85)
VBA32	BScope.Trojan.SvcHorse.01643
Malwarebytes	Malware.AI.3644140855
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Brrowho.D
TrendMicro-HouseCall	DDOS_NITOL_EL15018A.UVPM
Tencent	Malware.Win32.Gencirc.10b76af0
Yandex	Trojan.GenAsa!V07gDJK/UbU
SentinelOne	Static AI – Malicious PE – Spyware
eGambit	Trojan.Generic
Fortinet	W32/ServStart.AS!tr
AVG	Win32:ServStart-B [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.DDoS.36a