Malware

Malware.AI.3688842831 information

Malware Removal

The Malware.AI.3688842831 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3688842831 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Performs some HTTP requests
  • Attempts to modify desktop wallpaper
  • Installs itself for autorun at Windows startup
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.iuqssfsodp9ifjaposdfjhgosurijfaewrwergwea.com
www.youtube.com
ocsp.pki.goog
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
crl.pki.goog
crls.pki.goog

How to determine Malware.AI.3688842831?


File Info:

crc32: 8DA750C2
md5: 2addb4d20c1cdf522d0ec13eb76f0fa9
name: 2ADDB4D20C1CDF522D0EC13EB76F0FA9.mlw
sha1: 391f15de07028766b3d9d276a5468f5b58932b8b
sha256: 56e930841b23b79d644c389fdc9236b0a7e9c01f04d00343212c73696b3677db
sha512: 37e6044ed9b3e6ec62c61e4a4b03d9dd2075a692a70627f652f7699c1d78e304301cf9588e05461118f02996d931ed9a292530000fe6fea00826ec14325be0dc
ssdeep: 12288:pn3VDqF00wOKntmt0nv9MQrqK334iShgQfFSfstChSc1C:GNKnMt0nv9MyX3yf6cc1C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright:
InternalName: sin cont
FileVersion: 1.00
CompanyName:
LegalTrademarks:
ProductName:
ProductVersion: 1.00
OriginalFilename: sin cont.exe

Malware.AI.3688842831 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
ALYacTrojan.GenericKD.12789098
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.20c1cd
CyrenW32/S-db1d9c36!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/VB.OTF
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Wanna.amee
BitDefenderTrojan.GenericKD.12789098
NANO-AntivirusTrojan.Win32.Wanna.exfnku
MicroWorld-eScanTrojan.GenericKD.12789098
TencentWin32.Trojan.Ransomware.Auto
Ad-AwareTrojan.GenericKD.12789098
SophosMal/VB-GI
BitDefenderThetaGen:NN.ZevbaF.34758.Un0@aKsxkeai
McAfee-GW-EditionBehavesLike.Win32.Trojan.tz
FireEyeGeneric.mg.2addb4d20c1cdf52
EmsisoftTrojan-Ransom.Filecoder (A)
AviraHEUR/AGEN.1122147
Antiy-AVLTrojan/Generic.ASMalwS.2414B33
MicrosoftRansom:Win32/Wadhrama.B
AegisLabTrojan.Win32.Wanna.j!c
ZoneAlarmTrojan-Ransom.Win32.Wanna.amee
GDataTrojan.GenericKD.12789098
McAfeeArtemis!2ADDB4D20C1C
MAXmalware (ai score=83)
VBA32BScope.Trojan.Dynamer
MalwarebytesMalware.AI.3688842831
PandaTrj/GdSda.A
IkarusTrojan-Ransom.Wanna
FortinetW32/VB.GI!worm
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.3688842831?

Malware.AI.3688842831 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment