Malware.AI.3976974686 (file analysis)

The Malware.AI.3976974686 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3976974686 virus can do?

Attempts to connect to a dead IP:Port (3 unique times)
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to create or modify system certificates

Related domains:

xui.ptlogin2.qq.com

localhost.ptlogin2.qq.com

How to determine Malware.AI.3976974686?


File Info:
crc32: CB749403
md5: 99c7e820e468fa3ac7bb77414151772f
name: 99C7E820E468FA3AC7BB77414151772F.mlw
sha1: 77a0232ed38fd751c44345b212a3689ce84478e0
sha256: 8466f7e902b8c2756523bb2271a08d678107e81268f33e5b172df76fce837038
sha512: b79f91472cb7f5a06eb271b2fd49585713d4978c8d5821cfdecdb16224585e00773ac0fa0d5574f8d7fbb5f5e7de30172d7ffbf647aed7bfede4eff458219978
ssdeep: 24576:79IW0JuFEPiBCHztHbV+TQ5oSoDuW682dJuoIFu:7F0JuC6YHzt7Y3S6uW680tI
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: x5b89x5168x7ba1x5bb6V2.0
FileVersion: 2.0.0.0
CompanyName: x5b89x5168x7ba1x5bb6V2.0
Comments: x5b89x5168x7ba1x5bb6V2.0
ProductName: x5b89x5168x7ba1x5bb6V2.0
ProductVersion: 2.0.0.0
FileDescription: x5b89x5168x7ba1x5bb6V2.0
Translation: 0x0804 0x04b0

Malware.AI.3976974686 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.484969
Cylance	Unsafe
Zillya	Trojan.QQPass.Win32.58979
Sangfor	PUP.Win32.Graftor.484969
Alibaba	TrojanPSW:Win32/QQPass.80ba016f
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.0e468f
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.QQPass.OZS
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Gen:Variant.Graftor.484969
NANO-Antivirus	Trojan.Win32.Graftor.fdsyps
MicroWorld-eScan	Gen:Variant.Graftor.484969
Tencent	Malware.Win32.Gencirc.10b57f38
Ad-Aware	Gen:Variant.Graftor.484969
Sophos	Generic PUA HH (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	Gen:NN.ZexaF.34236.8mKfa84ldjpb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.99c7e820e468fa3a
Emsisoft	Gen:Variant.Graftor.484969 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.QQPass.avz
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASCommon.FA
Kingsoft	Win32.Heur.KVM099.a.(kcloud)
Microsoft	Trojan:Win32/Occamy.C84
Arcabit	Trojan.Graftor.D76669
GData	Win32.Trojan.PSE.12FI8JT
AhnLab-V3	Malware/Win32.Generic.C2732642
Acronis	suspicious
McAfee	Artemis!99C7E820E468
MAX	malware (ai score=98)
VBA32	TrojanPSW.QQPass
Malwarebytes	Malware.AI.3976974686
Panda	Trj/GdSda.A
Rising	Stealer.QQpass!1.B69F (CLASSIC)
Yandex	Trojan.GenAsa!m40Jn1ivCfc
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/GameCheater
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Malware.AI.3976974686?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.3976974686 (file analysis)