Malware

Should I remove “Malware.AI.4120296180”?

Malware Removal

The Malware.AI.4120296180 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4120296180 virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4120296180?


File Info:

crc32: 90B4D2FA
md5: 4ea85c7d0fc29fa97b4ba7ce8b42b736
name: 4EA85C7D0FC29FA97B4BA7CE8B42B736.mlw
sha1: 856ea785147a1c416f8fd7b7d01646892a6daddf
sha256: 0345f40d81e3ec09a48ae032cf4a1a9f051beca1b4f2ae99a417efe3cd5baa7c
sha512: f6f2509c3cd0871b7b71d3577fb13c11ae92f7aae915a274b75c34f44b88dea772e99de64809871cab8f3af71197809a3c3495ddc7e289560b842c40380b9044
ssdeep: 24576:YgLbpCdTPgKV/bVctfMThLPr5GRYViJt3BUSir32smcA815kRiKgS:YgfpCdTr88Diz3OS+ScA6Pv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName: Meka
FileVersion: 1.5.14.4
CompanyName: Mihamoracene Software
LegalTrademarks:
ProductName: Mepidogi
ProductVersion: 2.9.14.73
FileDescription:
OriginalFilename: Meka.exe

Malware.AI.4120296180 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005497bb1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.IGENERICPMF.S2999308
CylanceUnsafe
ZillyaAdware.DealPly.Win32.109134
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWAdware ( 005497bb1 )
Cybereasonmalicious.d0fc29
CyrenW32/DealPly.BS.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.SN potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.DealPly.gen
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanAdware.DealPly.1.Gen
TencentMalware.Win32.Gencirc.10c89a6a
Ad-AwareAdware.DealPly.1.Gen
SophosDealPly Updater (PUA)
BitDefenderThetaAI:Packer.6F44925519
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.vh
FireEyeAdware.DealPly.1.Gen
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Genome.aecv
AviraHEUR/AGEN.1104226
Antiy-AVLTrojan/Generic.ASMalwS.2539A62
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitAdware.DealPly.1.Gen
GDataAdware.DealPly.1.Gen
AhnLab-V3PUP/Win32.DealPly.R242080
Acronissuspicious
McAfeeGenericR-OIY!4EA85C7D0FC2
MAXmalware (ai score=99)
VBA32Adware.DealPly
MalwarebytesMalware.AI.4120296180
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/AGEN.1033829!tr
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.4120296180?

Malware.AI.4120296180 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment