Categories: Malware

Malware.AI.4199425459 removal tips

The Malware.AI.4199425459 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4199425459 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Sniffs keystrokes
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Exhibits possible ransomware file modification behavior
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

www.sostronk.com
ocsp.pki.goog
dl.sostronk.com
crls.pki.goog

How to determine Malware.AI.4199425459?


File Info:

crc32: C1CDB74Fmd5: de5f534e84315dfa36b62df7b7f727e2name: DE5F534E84315DFA36B62DF7B7F727E2.mlwsha1: 25368ddc7e77de5bfc6147f7a9e852cac4b3ef2dsha256: 0e940200ef73aac080864334a56f3cc19195cc7058eeca59e8c0abb1e6836923sha512: 9515a05eb37209ead72211374bb14e77c580e42098d520d7af0c8049e45a4a7a5c26a81ebda2a817589ed54c5eaa47a481e62532131ce7b5b36af4b9d2f799a1ssdeep: 3072:jAsj8MBX8s0oXJoMRwBHQIhrD0q7w8FQVvy6chat7B+MlhfTtE+7VIQ3LQ:jAsBZmQwXRD9w8FQvtcvafa+LEtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Malware.AI.4199425459 also known as:

Bkav W32.AIDetect.malware2
Lionic Trojan.Win32.RansomKD.4!c
ALYac Trojan.RansomKD.5946303
Cylance Unsafe
Zillya Trojan.RansomKD.Win32.306
Sangfor Trojan.Win32.Agent.usrg
CrowdStrike win/malicious_confidence_60% (W)
BitDefender Trojan.RansomKD.5946303
Cybereason malicious.e84315
Symantec Ransom.Cerber
ESET-NOD32 a variant of Generik.IIRHXBE
APEX Malicious
Alibaba Trojan:Win32/Generic.9c98afb7
MicroWorld-eScan Trojan.RansomKD.5946303
Ad-Aware Trojan.RansomKD.5946303
Sophos Mal/Generic-S
Comodo Malware@#3fq7m5gg95xz0
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.ObfusRansom.cc
FireEye Generic.mg.de5f534e84315dfa
Emsisoft Trojan.RansomKD.5946303 (B)
Microsoft VirTool:Win32/Aicat.A!ml
GData Trojan.RansomKD.5946303
McAfee Artemis!DE5F534E8431
MAX malware (ai score=88)
VBA32 suspected of Trojan.Downloader.gen
Malwarebytes Malware.AI.4199425459
Panda Trj/CI.A
TrendMicro-HouseCall TROJ_GEN.R011H0CDP21
Paloalto generic.ml
Qihoo-360 Win32/Trojan.Ransom.560

How to remove Malware.AI.4199425459?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Trojan.Win32.Agent.xboakk removal

The Trojan.Win32.Agent.xboakk is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

About “Worm.Win32.Vobfus.efoh” infection

The Worm.Win32.Vobfus.efoh is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Generic.Malware.Lco.500CC679 removal tips

The Generic.Malware.Lco.500CC679 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Trojan:Win32/Plugx.B malicious file

The Trojan:Win32/Plugx.B is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Should I remove “Malware.AI.4180628677”?

The Malware.AI.4180628677 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Application.Tool.Camerashy.A (file analysis)

The Application.Tool.Camerashy.A is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago