Malware

What is “Malware.AI.3726572294”?

Malware Removal

The Malware.AI.3726572294 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3726572294 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
pastebin.com
ocsp.digicert.com

How to determine Malware.AI.3726572294?


File Info:

crc32: 1C705AC8
md5: 4ffb0a7fc3580f9a4de94c9ae3c6dd1c
name: 4FFB0A7FC3580F9A4DE94C9AE3C6DD1C.mlw
sha1: 23ea02aae79b5568eaf51885b7ca7840e9278ea7
sha256: 216859cf332b620e28c49c7acc68bab7c12162d18fd2543e9e665de52cd9a9a2
sha512: e93bbf9a34e56339109557c9d1306215cff7db6c278ef50a90161e7daf055249443d72f1809c054a75aa7eb06c7be47199e394f1669049f89e05de17c74cf25f
ssdeep: 24576:5FCrnAQpgToLzST9wG+oeZ+qSiDIqAt2J4xwi:0TfGXqRDIqXEh
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Malware.AI.3726572294 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00574b221 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.41883
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.J1
ALYacGen:Variant.Symmi.93251
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.a4fe13d6
K7GWTrojan ( 00574b221 )
Cybereasonmalicious.fc3580
CyrenW32/Zusy.EM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIRH
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Razy-6726310-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.93251
NANO-AntivirusTrojan.Win32.PackedENT.fgucfs
MicroWorld-eScanGen:Variant.Symmi.93251
TencentTrojan.Win32.Kryptik.gify
Ad-AwareGen:Variant.Symmi.93251
SophosMal/Generic-S + Mal/Inject-GJ
ComodoTrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderThetaGen:NN.ZexaF.34294.7CW@a0OORZi
McAfee-GW-EditionBehavesLike.Win32.Sytro.dc
FireEyeGeneric.mg.4ffb0a7fc3580f9a
EmsisoftGen:Variant.Symmi.93251 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASBOL.C62E
MicrosoftVirTool:Win32/CeeInject.AKZ!bit
ArcabitTrojan.Symmi.D16C43
GDataGen:Variant.Symmi.93251
TACHYONTrojan/W32.Selfmod
AhnLab-V3Trojan/Win32.Agent.R234196
Acronissuspicious
McAfeePacked-FJB!4FFB0A7FC358
MAXmalware (ai score=100)
VBA32Trojan.Packed
MalwarebytesMalware.AI.3726572294
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.GenAsa!0xM7zILK7cg
IkarusTrojan.Patched
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.3726572294?

Malware.AI.3726572294 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment