Malware

Malware.AI.4245193647 removal

Malware Removal

The Malware.AI.4245193647 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4245193647 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
all.fingersleep.bid
none.coalrate.men

How to determine Malware.AI.4245193647?


File Info:

crc32: 18BF9DB9
md5: 8ad07502af3a98e0debcfce6a89f73fb
name: 8AD07502AF3A98E0DEBCFCE6A89F73FB.mlw
sha1: ec08b59cc6ea776b5e1f1cb23f9f3ff555c7f186
sha256: 2374373976696e5389fca6f52455d10f82a3052e0280791f93532d3fc6688829
sha512: 1f28e2e032044b3a6bebe615f5f5285638f5d27e1205d30ec391b644a5c264a1e2910f762783486e942649c0e93e43d408e1df2f85e7de6e02aab58ff935ed7f
ssdeep: 12288:KbTIJhx87UkqXNKNbVo0qbIq18h0Qn7IxZhKqw7vhJ70sh+mV0a+n5cR6gMOSjj:KXojopUMdqb6SPKp/4su3naSjJhZjU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Eephoodygadlo ilsidietas ryanfoa
InternalName: CITAUT.EXE
FileVersion: 1.6.5.7
CompanyName: xa9Eephoodygadlo ilsidietas ryanfoa
ProductName: CITAUT
ProductVersion: 1.6.5.7
OriginalFilename: citaut.exe
Translation: 0x0409 0x04e4

Malware.AI.4245193647 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053ba2f1 )
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CynetMalicious (score: 100)
CAT-QuickHealSwbndlr.Dlhelper.V2
ALYacApplication.Bundler.iStartSurf.1.Gen
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.143742
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/Kryptik.4bb8feb0
K7GWTrojan ( 0053ba2f1 )
Cybereasonmalicious.2af3a9
CyrenW32/Kryptik.CZT.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJAJ
APEXMalicious
AvastFileRepMalware
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
BitDefenderApplication.Bundler.iStartSurf.1.Gen
NANO-AntivirusTrojan.Win32.Kryptik.fgmiuy
MicroWorld-eScanApplication.Bundler.iStartSurf.1.Gen
TencentWin32.Adware.Generic.Eehk
Ad-AwareApplication.Bundler.iStartSurf.1.Gen
SophosMal/Generic-S + Mal/EncPk-AOA
ComodoApplication.Win32.Dlhelper.GE@8159h4
BitDefenderThetaGen:NN.ZexaF.34294.gE0@aaGYYOli
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Downloader.vz
FireEyeGeneric.mg.8ad07502af3a98e0
EmsisoftApplication.Bundler.iStartSurf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.fay
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.276850F
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitApplication.Bundler.iStartSurf.1.Gen
GDataApplication.Bundler.iStartSurf.1.Gen
Acronissuspicious
McAfeePacked-FKC!8AD07502AF3A
MAXmalware (ai score=100)
VBA32Trojan.Vittalia
MalwarebytesMalware.AI.4245193647
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GJJV!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Malware.AI.4245193647?

Malware.AI.4245193647 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment