About “Malware.AI.4148600076” infection

The Malware.AI.4148600076 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4148600076 virus can do?

• Executable code extraction
• Creates RWX memory
• Attempts to connect to a dead IP:Port (16 unique times)
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Performs some HTTP requests
• Unconventionial language used in binary resources: Indonesian
• The binary likely contains encrypted or compressed data.
• Uses Windows utilities for basic functionality
• Checks for the presence of known windows from debuggers and forensic tools
• Steals private information from local Internet browsers
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Attempts to modify proxy settings
• Anomalous binary characteristics

Related domains:

How to determine Malware.AI.4148600076?

File Info:
crc32: EA7BB13E
md5: 605f08a3963c7da75bc25df9b0945001
name: 605F08A3963C7DA75BC25DF9B0945001.mlw
sha1: eb7e1c0e0401d8c2a43c3865d76892404054d6c2
sha256: dd9f9a676cc6c0df4cc60de3afc5ff72dcb63104665c9d1f16d2c8db953d1dfa
sha512: 38f3e60f28b289dabd69c814beeb813d64a2040d3da1f5f23ff665981763e10c64c6d178f6996efeb87f65c8c4555c3f6cd720f2dabd1df8b33567db270d403e
ssdeep: 49152:Cs81Q0az7JMTWs81Q0az7JMTDMTYNB81Q0ahrLEULzdHFUt:bSM7SSM7GNBSaTXd6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyright xa9 Rhm-Files 2017 - All Right Reserved
InternalName: xb5xbfRHMFILESxb3_GTA
FileVersion: 1.00.0096
CompanyName: http://rhm-files.blogspot.com
Comments: Resource Injector Created By Markus Tunggul Wulung Aji
ProductName: Resource Injector
ProductVersion: 1.00.0096
FileDescription: Cheat GTA San Andreas Multiplayer SA-MP
OriginalFilename: xb5xbfRHMFILESxb3_GTA.exe

Malware.AI.4148600076 also known as:

How to remove Malware.AI.4148600076?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.