Malware

Malware.AI.3916705242 removal instruction

Malware Removal

The Malware.AI.3916705242 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3916705242 virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (9 unique times)
  • Starts servers listening on 127.0.0.1:0
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Looks up the external IP address
  • Uses Windows utilities for basic functionality
  • Checks for the presence of known windows from debuggers and forensic tools
  • Steals private information from local Internet browsers
  • Network activity contains more than one unique useragent.
  • Writes a potential ransom message to disk
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Attempts to disable Windows Defender
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

sokiran.xyz
ipinfo.io
www.tjhzbzj.com
i.spesgrt.com
www.anderesitebrauchen.com
flamkravmaga.com
privacytoolsforyoufree.xyz
cdn.discordapp.com
a.xyzgame.vip
apps.identrust.com
ocsp.digicert.com
www.listincode.com
statuse.digitalcertvalidation.com
iplogger.org
crl.identrust.com
ocsp.comodoca.com
iplis.ru
ocsp.usertrust.com
crl.usertrust.com
ocsp.sectigo.com

How to determine Malware.AI.3916705242?


File Info:

crc32: 08B03455
md5: 99afd1005c22fbb949c0e539016b5baf
name: 99AFD1005C22FBB949C0E539016B5BAF.mlw
sha1: 508e4e158c930c7e9245d6f0519dd89c850bef0e
sha256: a65e8cca4d7424ebda6db2a1b8dc9ae880aaf05bfa841bf5644e761b9deda75a
sha512: 977bbe7a79962b2ddafa837890877f028d26eb4ce52c0ba51cf849ff57a3d619d692de47631d27c953df095f442f31f46a18652e9c9bf8f74cc263b6e1b0afa6
ssdeep: 49152:EgIrT4JTEPnAdaD5kWb78mcPOvdA3MLpTlVspZUJ2E5yAiflDU:JeqEPn4Y/8nPOFA0prKWcHU
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Malware.AI.3916705242 also known as:

CyrenCloudW32/Trojan.VJVU-7820
Elasticmalicious (high confidence)
ClamAVWin.Packed.Barys-9859531-0
CAT-QuickHealTrojan.Agent
McAfeeArtemis!99AFD1005C22
MalwarebytesMalware.AI.3916705242
SangforTrojan.Win32.Agent.ky
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:Win32/Upatre.409ecc7c
Cybereasonmalicious.58c930
NANO-AntivirusTrojan.Win32.Chapak.ixnfla
CyrenW32/Trojan.VJVU-7820
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.37263539
MicroWorld-eScanTrojan.GenericKD.37263539
TencentWin32.Trojan.Atraps.Hvtf
SophosMal/Generic-S
DrWebTrojan.Inject4.13781
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.Agent.woetv
eGambitUnsafe.AI_Score_81%
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Agent.FKLA
ZoneAlarmHEUR:Trojan.Win32.Crypt.gen
MicrosoftTrojan:Win32/Glupteba!ml
AhnLab-V3Trojan/Win.Frs.C4557775
VBA32Trojan.Inject
MAXmalware (ai score=88)
PandaTrj/CI.A
RisingDropper.Agent/NSIS!1.D805 (CLASSIC)
IkarusTrojan-Spy.MSIL.Agent
FortinetW32/PossibleThreat
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Crypt.HyoDoo8A

How to remove Malware.AI.3916705242?

Malware.AI.3916705242 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment