Malware.AI.3852185249 malicious file

The Malware.AI.3852185249 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3852185249 virus can do?

Executable code extraction
Injection (inter-process)
Creates RWX memory
A process attempted to delay the analysis task.
A process created a hidden window
Drops a binary and executes it
Unconventionial binary language: Russian
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to remove evidence of file being downloaded from the Internet
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.3852185249?


File Info:
crc32: 1894840E
md5: 84b8e83dd913a678a31e692b3c5f287c
name: 84B8E83DD913A678A31E692B3C5F287C.mlw
sha1: b8d6277b8ea6c03f25e0ee9ab6238112a357e7ae
sha256: dd5f19396da69c20db1e2ee616760f02815edfb5ba355ff1327e6c30f6b19fca
sha512: 435df64c3ee5f4549a34a6fbe663f178c9392b95650787388f71c2d8d3c0dccc1d6b0fe844845bd1002d9dccb82be19b1aa2ce63f3321107e55fb7217384e572
ssdeep: 12288:lfzgT02Onl7CIf30JycPe2U2f22MBN54cwLJccqi0cLuxVsgmYFQ:1vLf30JycPe2U2f22Mv54NFRqi0cLux
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2015 Targem Games
InternalName: game
FileVersion: 0.2.11.25594(299c2d9)
CompanyName: Targem Games
ProductName: Crossout
ProductVersion: 0.2.11.25594(299c2d9)
FileDescription: Crossout Game Client
OriginalFilename: game.exe
Translation: 0x0419 0x04b0

Malware.AI.3852185249 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.344433
FireEye	Generic.mg.84b8e83dd913a678
Qihoo-360	Win32/Trojan.Dropper.17c
ALYac	Gen:Variant.Ursu.344433
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Gen:Variant.Ursu.344433
K7GW	Trojan ( 700000121 )
Cybereason	malicious.dd913a
Cyren	W32/Trojan.FVM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Kaspersky	Trojan.MSIL.Steamilik.zwn
NANO-Antivirus	Trojan.Win32.Steamilik.ekdsmi
AegisLab	Trojan.MSIL.Steamilik.4!c
Tencent	Msil.Trojan.Steamilik.Ebgy
Ad-Aware	Gen:Variant.Ursu.344433
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1122310
DrWeb	Trojan.Inject2.40115
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Emsisoft	Gen:Variant.Ursu.344433 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.fhqd
Avira	HEUR/AGEN.1122310
MAX	malware (ai score=100)
Antiy-AVL	Trojan/MSIL.Steamilik
Microsoft	Trojan:Win32/Vigorf.A
Arcabit	Trojan.Ursu.D54171
ZoneAlarm	Trojan.MSIL.Steamilik.zwn
GData	Gen:Variant.Ursu.344433
Cynet	Malicious (score: 90)
McAfee	Artemis!84B8E83DD913
Malwarebytes	Malware.AI.3852185249
Panda	Trj/CI.A
APEX	Malicious
ESET-NOD32	a variant of MSIL/Injector.QYZ
Rising	Trojan.Injector!8.C4 (TFE:C:uDbAOrQ9OXJ)
Ikarus	Trojan.MSIL.Stimilik
Fortinet	MSIL/Injector.QYC!tr
BitDefenderTheta	Gen:NN.ZemsilF.34804.Hm0@aW5k4WiG
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)
MaxSecure	Trojan.Malware.121218.susgen

How to remove Malware.AI.3852185249?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.3852185249 malicious file