Malware

Malware.AI.4199705005 removal tips

Malware Removal

The Malware.AI.4199705005 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4199705005 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4199705005?


File Info:

crc32: 125C5FE4
md5: b16d759897fa5dc1d903543bf95b9fd6
name: B16D759897FA5DC1D903543BF95B9FD6.mlw
sha1: e398cbbd5e708e11cb42063208f189e0430430b1
sha256: 1e0b9e1e9f113f7768469e91229fc7710043c2c8995a61cf2aa4ab81ff99bb8a
sha512: 8bbce1552ad5e097b177c8651113cae9fe17c860e502814bedda7e491746d63c39086ae9ac2efa781852ae8d5408ef631aa55cee80ecadd2321f78f20dff06a8
ssdeep: 12288:06LVNN/+FyZCp21I9G36kHj8+BHGGIB+cJeXm0C:7HsFyZCp2+Y3D8+BBXm0C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 All Rights Reserved
InternalName: Podapam
FileVersion: 2.1.15.27
CompanyName: Kopel
LegalTrademarks:
ProductName: Fonuhor Sofu
ProductVersion: 3.6.7.99
FileDescription:
OriginalFilename: podapampegoli.exe
Translation: 0x04b0 0x04e4

Malware.AI.4199705005 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005393151 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWAdware ( 005393151 )
Cybereasonmalicious.897fa5
CyrenW32/DealPly.U.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.WC potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanAdware.DealPly.1.Gen
TencentMalware.Win32.Gencirc.10c8c820
Ad-AwareAdware.DealPly.1.Gen
SophosGeneric PUA OD (PUA)
ComodoApplicUnwnt@#2kg5avvuthnlj
BitDefenderThetaGen:NN.ZelphiF.34266.GK0@a8Pye8ji
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
FireEyeGeneric.mg.b16d759897fa5dc1
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.ksfu
AviraHEUR/AGEN.1125473
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.25C2DBB
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataAdware.DealPly.1.Gen
AhnLab-V3PUP/Win32.Dealply.C3130156
Acronissuspicious
McAfeeArtemis!B16D759897FA
MAXmalware (ai score=99)
MalwarebytesMalware.AI.4199705005
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.Agent!T3jlwWTybv4
IkarusPUA.DealPly
FortinetAdware/Generic
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.4199705005?

Malware.AI.4199705005 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment