Malware.AI.3771002250 information

The Malware.AI.3771002250 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3771002250 virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Deletes its original binary from disk
Sniffs keystrokes
Tries to unhook or modify Windows functions monitored by Cuckoo
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.3771002250?


File Info:
crc32: 9B203A09
md5: 35cb5c0b540e3429014dcef76e7093d8
name: 35CB5C0B540E3429014DCEF76E7093D8.mlw
sha1: c5906f64eb301ee07274a9adfa8a6fbdc96952e7
sha256: 89cfafa4907131a327a07d471101f0adfed48ac6a11c8b75da8e328c9fdc8310
sha512: a0c0d3c2e2fbbf3ed2a4d9498186f1697ffc72706bd3716542d7728f047c3b6c0707496156a13fba2bfcc04c1f96374323c600a295aac3c3766e4ab4d24aaeb7
ssdeep: 6144:GnpAOgw8HYWO9W/HYZKT+knMpASauvx8dDEsMnGOrfKTqpBkPNOJRAmYxJ15zZi1:GnpH4HYWO9WUI+kMPamb9KkkIJY15t4
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x6709(C) 2020
InternalName: loader
FileVersion: 1, 0, 0, 1
CompanyName: yida
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: yida loader
SpecialBuild: 
ProductVersion: 1, 0, 0, 1
FileDescription: loader
OriginalFilename: loader.dat
Translation: 0x0804 0x04b0

Malware.AI.3771002250 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Tool.Camfrogpwd
ClamAV	Win.Trojan.Refroso-2604
CAT-QuickHeal	Backdoor.Bifrose.AE6
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Trojan.LJHG-4205
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.MoleboxVS.A suspicious
APEX	Malicious
Avast	FileRepMetagen [Malware]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.Win32.Farfli.gen
NANO-Antivirus	Trojan.Win32.Siscos.iwesqu
ViRobot	Trojan.Win32.PSWAutoit.1582051
Tencent	Malware.Win32.Gencirc.10cf0419
Sophos	Mal/Generic-R
Comodo	TrojWare.Win32.Trojan.Inject.ZY0@2muj6t
BitDefenderTheta	AI:Packer.25C49ECF1F
VIPRE	Backdoor.Win32.Bifrose.gnt (v)
McAfee-GW-Edition	BehavesLike.Win32.Autorun.fc
FireEye	Generic.mg.35cb5c0b540e3429
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1103738
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win32.Refroso.R42020
McAfee	Generic BackDoor.aag
VBA32	Backdoor.Bifrose
Malwarebytes	Malware.AI.3771002250
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.100 (RDML:wuIgir0ySB3aK9O/Zd7yRg)
Yandex	Trojan.GenAsa!zqmR0vCKuKo
Ikarus	Trojan.Boxed
Fortinet	W32/Bifrose.FXV!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml

How to remove Malware.AI.3771002250?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.3771002250 information