Malware

What is “Malware.AI.4003479986”?

Malware Removal

The Malware.AI.4003479986 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4003479986 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4003479986?


File Info:

crc32: 9807F0DF
md5: d4fea178ecc42f5efb43d72d3d5c59ab
name: D4FEA178ECC42F5EFB43D72D3D5C59AB.mlw
sha1: aaecc14a9bc30bfc5a3f1eb6b00b5b21323ad053
sha256: fb535aff89ae419842dfab5b862ef60a6cc6af9bdd75356f40399a8d89f06d8b
sha512: 929ccde986e8880f0b9d1250b27247ef84a20e4516fd430ae2d74d7f17e5c706a19c5a0dab71f08af1bcb259dbef77d59c218bebf11273691e8f261512df3f74
ssdeep: 49152:pAI+10bqKSemEnN7xTDT4GJdsKC8vI5Sd8hTElH:pAI+1gqKSeJlzpds3YsY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: cheat
FileDescription: Cheat 1.00 Installation
FileVersion: 1.00
Comments:
CompanyName: cheat
Translation: 0x0409 0x04e4

Malware.AI.4003479986 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005825631 )
LionicTrojan.MSIL.Reline.i!c
DrWebTrojan.PWS.Steam.20658
CynetMalicious (score: 99)
CAT-QuickHealTrojan.IgenericRI.S22838491
ALYacTrojan.Generic.30123132
CylanceUnsafe
SangforInfostealer.MSIL.Reline.gen
AlibabaTrojan:Win32/runner.ali1000123
K7GWTrojan ( 005825631 )
Cybereasonmalicious.8ecc42
CyrenW32/MSIL_Kryptik.AYJ.gen!Eldorado
SymantecScr.Malcode!gdn30
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
KasperskyUDS:Trojan-PSW.MSIL.Reline.gen
BitDefenderGen:Variant.Bulz.721915
NANO-AntivirusTrojan.Win32.Reline.jbpnqv
MicroWorld-eScanGen:Variant.Bulz.721915
TencentMsil.Trojan-qqpass.Qqrob.Wtnq
SophosMal/Generic-R
BitDefenderThetaGen:NN.ZemsilF.34266.zy0@a0mmwPf
TrendMicroTROJ_GEN.R002C0DJ721
McAfee-GW-EditionBehavesLike.Win32.HLLP.tc
FireEyeGen:Variant.Bulz.721915
EmsisoftGen:Variant.Razy.923656 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.RedLineSteal.eibcp
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.349D13A
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataTrojan.Generic.30123132
McAfeeArtemis!D4FEA178ECC4
MAXmalware (ai score=86)
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.4003479986
TrendMicro-HouseCallTROJ_GEN.R002C0DJ721
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan-Ransom.Win32.Crypmod.zfq
FortinetW32/multiple_detections
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.4003479986?

Malware.AI.4003479986 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment