Malware

How to remove “Malware.AI.3659104141”?

Malware Removal

The Malware.AI.3659104141 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3659104141 virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
sciencemiracle.top
duckandbear.top

How to determine Malware.AI.3659104141?


File Info:

crc32: 4D3BB975
md5: 511eac4b4495d2b0a4c0315a63970d79
name: 511EAC4B4495D2B0A4C0315A63970D79.mlw
sha1: a8380eb7aabd8d6240d17069e0ba8f4d82960eaf
sha256: 5f3efc1e454d287cc6d24a79416418c3f5f9e7f3d80e9fa4315ccdc632bbb21d
sha512: cfc1718755d5c1b3c9ea7ee8a0a52e3bf2cefb5d04df7890ea8189fab36ed88bcb98330cc960043fa7933c0d664d471090b6f59374f823de08a43608ab88da56
ssdeep: 3072:0rV1c41UtsuGopfGuN9dCXZES38oFJ3Fp7FXmcpvrlZoRmq:0o4Uj/N9dCJ5p337FXmcEmq
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: Duckie swap. All rights reserved.
InternalName: Duckie manager
FileVersion: 2.5.1.2
CompanyName:
Comments: Manage free sowtware install
ProductName: Install suite manager
ProductVersion: 2.5.1.2
Translation: 0x0409 0x04b0

Malware.AI.3659104141 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 005189921 )
LionicTrojan.Win32.Tovkater.4!c
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2392
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.870131
CylanceUnsafe
ZillyaAdware.DLBoost.Win32.3347
SangforTrojan.Win32.Tovkater.EP
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanDownloader:Win32/Tovkater.e18e9155
K7GWTrojan-Downloader ( 005189921 )
Cybereasonmalicious.b4495d
CyrenW32/Tovkater.P.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDownloader.Tovkater.EP
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Dropper.Tovkater-6646870-0
KasperskyTrojan-Downloader.Win32.Tovkater.c
BitDefenderGen:Variant.Bulz.870131
NANO-AntivirusTrojan.Win32.InstallMonster.etjbjr
MicroWorld-eScanGen:Variant.Bulz.870131
TencentWin32.Trojan-downloader.Tovkater.Srni
Ad-AwareGen:Variant.Bulz.870131
SophosMal/Generic-S
ComodoApplication.Win32.InstallMonster.DX@7e9j3l
BitDefenderThetaGen:NN.ZexaF.34266.ny0@aScUbTki
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PJ321
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.511eac4b4495d2b0
EmsisoftGen:Variant.Bulz.870131 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1117983
Antiy-AVLTrojan/Generic.ASMalwS.2237DCD
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Bulz.870131
AhnLab-V3Adware/Win32.DLBoost.R210009
Acronissuspicious
McAfeeArtemis!511EAC4B4495
MAXmalware (ai score=99)
VBA32TrojanDownloader.Tovkater
MalwarebytesMalware.AI.3659104141
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PJ321
RisingTrojan.Generic@ML.97 (RDMK:AjmGj53KwKF1sSuH+4XJCg)
YandexTrojan.DL.Tovkater!CwNs8lYChns
FortinetW32/Tovkater.EN!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.3659104141?

Malware.AI.3659104141 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment