Malware

Malware.AI.4242403216 (file analysis)

Malware Removal

The Malware.AI.4242403216 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4242403216 virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4242403216?


File Info:

crc32: BD62E13B
md5: 206fbee2988c69e6151b7f5a2ad79320
name: 206FBEE2988C69E6151B7F5A2AD79320.mlw
sha1: 76f669c0b89bd892ed1f908f2c9d95d75096f539
sha256: 237c7b80dfc971bad5b6e21166a0f31121e9c7e35d5e088860d9f1d709b53ca0
sha512: cc5f0e8ed9a9fd3d141a79e5a64d030f7b0015d6bc02a5ddd1de195aacddba58b0f23f24460e86e1cecc9c33cbc56b0e9573eb0501c11b9f63e2e106589a32d5
ssdeep: 24576:1AoyeMP4njkJMhzf/ZZi4zBxPyQ9BJBqSovlGLztooIQTmKeckcszzojeJGLjs:OgMajZ0eHBJgSovGtT5eckcszKj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2010-2017 All Rights Reserved
InternalName: RafemubLaho
FileVersion: 2.6.11.12
CompanyName: Fegidap Software Ltd.
LegalTrademarks:
ProductName: Mafuha 1 Kime
ProductVersion: 3.7.29.47
FileDescription:
OriginalFilename: RafemubLaho.exe

Malware.AI.4242403216 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005497bb1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWAdware ( 005497bb1 )
Cybereasonmalicious.2988c6
CyrenW32/DealPly.AI.gen!Eldorado
ESET-NOD32a variant of Win32/DealPly.QB potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanAdware.DealPly.1.Gen
TencentMalware.Win32.Gencirc.10b213d4
Ad-AwareAdware.DealPly.1.Gen
SophosDealPly Updater (PUA)
ComodoApplicUnwnt@#3e7hc6whkkus0
BitDefenderThetaAI:Packer.3CE2A33219
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.206fbee2988c69e6
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.diic
AviraHEUR/AGEN.1104226
Antiy-AVLTrojan/Generic.ASMalwS.2451E9D
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataAdware.DealPly.1.Gen
AhnLab-V3PUP/Win32.DealPly.C2427081
Acronissuspicious
McAfeeGenericR-LPJ!206FBEE2988C
MAXmalware (ai score=99)
VBA32Adware.DealPly
MalwarebytesMalware.AI.4242403216
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexRiskware.Agent!tY6WU9STFQs
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/AGEN.1033829!tr
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Malware.AI.4242403216?

Malware.AI.4242403216 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment