Malware

How to remove “Malware.AI.4010969161”?

Malware Removal

The Malware.AI.4010969161 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4010969161 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Arabic (Tunisia)
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
trick.matchoatmeal.icu
fuss.wavesfork.online

How to determine Malware.AI.4010969161?


File Info:

crc32: EF1EAA28
md5: 96e1101826b5277b83d4459cf2db449e
name: 96E1101826B5277B83D4459CF2DB449E.mlw
sha1: 62a5abce39ae61e16bf06b031d44b6731e8249ce
sha256: de314a1cdf9ef62e3c98cefc119c7b55a2a876b00f0f62266a5afc4d8959a79f
sha512: b4b07859cc7c8dd1946037e7bce467db9229917f4245fa9bb06d12ff6af0ba5ddf93a87516301d640a36608c75fd1040fbc0f3d2bc3f98427904b4220c717ad5
ssdeep: 24576:Azm0wejgdPMyJU9VvAenuBT/GDxlSJK452genkgjfqlUYomNYQJ4G5Hb:RWy0yJU9JwCDrS/5NUhIobgR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: LGPL
InternalName: vmmon
FileVersion: 2.8
CompanyName: Sysprogs UG (haftungsbeschraenkt)
LegalTrademarks: VirtualKD
Comments: http://virtualkd.sysprogs.org/
ProductName: VirtualKD
ProductVersion: 2.8
FileDescription: Virtual Machine Monitor
OriginalFilename: vmmon.exe
Translation: 0x0409 0x04b0

Malware.AI.4010969161 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005424571 )
LionicAdware.Win32.StartSurf.2!c
DrWebTrojan.Vittalia.17867
McAfeePacked-FKC!96E1101826B5
CylanceUnsafe
ZillyaAdware.StartSurf.Win32.73961
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/StartSurf.37054c55
K7GWTrojan ( 005424571 )
Cybereasonmalicious.826b52
CyrenW32/Kryptik.DID.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GLRI
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentMalware.Win32.Gencirc.10ba4c58
Ad-AwareGen:Heur.Mint.Zamg.1
SophosIStartSurfInstaller (PUA)
ComodoMalware@#1vldiufiejqw8
BitDefenderThetaGen:NN.ZexaF.34170.Ir0@aqTMRghO
McAfee-GW-EditionBehavesLike.Win32.Shohdi.th
FireEyeGeneric.mg.96e1101826b5277b
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dyyde
AviraHEUR/AGEN.1114840
Antiy-AVLTrojan/Generic.ASMalwS.294B317
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Heur.Mint.Zamg.1
Acronissuspicious
VBA32BScope.Trojan.Fuerboos
MAXmalware (ai score=86)
MalwarebytesMalware.AI.4010969161
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexTrojan.GenAsa!UqVP4dlq5ZE
IkarusPUA.Dlhelper
FortinetW32/GenKryptik.CFAU!tr
AVGWin32:AdwareX-gen [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.4010969161?

Malware.AI.4010969161 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment