Malware

About “Malware.AI.3933510363” infection

Malware Removal

The Malware.AI.3933510363 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3933510363 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.3933510363?


File Info:

crc32: 0743854E
md5: 66c29389aaa5b3ffa9845e4211e5ab94
name: 66C29389AAA5B3FFA9845E4211E5AB94.mlw
sha1: 46731d54f70a8f890431f3a7926a908e03682531
sha256: 1df72f546b322d35123863feda040d0d4d58609da2a94ef44cbfeaea5cae435c
sha512: 0e852abe29e178e0d2ae86206e4795bbdc7b975b8543fcadff6e191d07dd64fadb9076d365663e7428d5fa83a6373c04963f339b9901de8bd85bbc7e8a7b194d
ssdeep: 12288:mkyuUYkPlydbnOrF0Cnup4GnkQQRbh25mGbCMXInbvrYxOSf6:pfkPlydSOwuZnXQzGbCMXInLcV6
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: x5f52x6e38x620fx5236x4f5cx8005x6240x6709
InternalName:
FileVersion: 1.0.0.0
CompanyName: http://www.jxgame.net/
LegalTrademarks:
Comments: x5c0fx6e38x620fx8f6cx6362x5668x4e0bx8f7dx5730x5740 http://www.jxgame.net
ProductName:
ProductVersion: 1.0.0.0
FileDescription: x672cx6e38x620fx7531x5c0fx6e38x620fx8f6cx6362x5668x751fx6210
OriginalFilename:
Translation: 0x0804 0x03a8

Malware.AI.3933510363 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.ArchSMS.4!c
DrWebTrojan.SMSSend.3622
MicroWorld-eScanGen:Variant.Jacard.197162
ALYacGen:Variant.Jacard.197162
CylanceUnsafe
ZillyaTool.ArchSMS.Win32.6885
SangforPUP.Win32.Ulise.104292
AlibabaTrojan:Win32/BScope.37902345
CyrenW32/A-e6d075cd!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
BitDefenderGen:Variant.Jacard.197162
NANO-AntivirusRiskware.Win32.ArchSMS.bnwgor
Ad-AwareGen:Variant.Jacard.197162
SophosMal/Generic-S
ComodoMalware@#1r45crat9478t
BitDefenderThetaGen:NN.ZelphiCO.34266.LmKfaCHwN9dj
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.hc
FireEyeGeneric.mg.66c29389aaa5b3ff
EmsisoftGen:Variant.Jacard.197162 (B)
SentinelOneStatic AI – Malicious PE
JiangminHoax.ArchSMS.jih
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_98%
KingsoftWin32.Torj.Hoax.(kcloud)
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Jacard.197162
AhnLab-V3Malware/Win32.Generic.C2762812
McAfeeArtemis!66C29389AAA5
MAXmalware (ai score=100)
VBA32BScope.Trojan.Smasarch
MalwarebytesMalware.AI.3933510363
YandexTrojan.GenAsa!5S5XWjSrnPY
IkarusTrojan.Win32.FakeAV
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.3933510363?

Malware.AI.3933510363 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment