Malware

About “Malware.AI.4250720066” infection

Malware Removal

The Malware.AI.4250720066 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4250720066 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Malware.AI.4250720066?


File Info:

crc32: 20080765
md5: ea15776dce7894b528d4664a0137e892
name: EA15776DCE7894B528D4664A0137E892.mlw
sha1: afb2888af4a5f7ed473ffd25f2a7e95e81ccb89d
sha256: 78d10efc67216d809ab353376f21d19ebaefa6945f3c60db43d559c9cae501e8
sha512: 9f407156685986935c84a9cc2cd45b505061a294b2137fb95181e132d7ea24e36e0d952a70fab314381c82ec6f06340949ee8010f11f4773101cb4b2b502af30
ssdeep: 6144:H9/9LbZbpgG6DV7z3IUD+lKiRMlx/ULCY:d/FfgG6DVfIUCkK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 0.0.0.0
InternalName: ss.exe
FileVersion: 10.0.19041.546 (WinBuild
CompanyName: Microsoft Corporation
Comments: Host Process for Windows Services
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.19041.546 (WinBuild
FileDescription: svchost.exe
OriginalFilename: ss.exe

Malware.AI.4250720066 also known as:

LionicTrojan.MSIL.Stealer.l!c
Elasticmalicious (high confidence)
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Stealer.a6df52e1
ESET-NOD32a variant of Generik.MXLQTGV
APEXMalicious
AvastWin32:PWSX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34126.ru0@ae5kfui
McAfee-GW-EditionBehavesLike.Win32.Generic.dm
FireEyeGeneric.mg.ea15776dce7894b5
SentinelOneStatic AI – Malicious PE
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_98%
KingsoftWin32.Heur.KVMH008.a.(kcloud)
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftTrojan.Heur!.03013681
McAfeeRDN/Generic PWS.y
VBA32CIL.HeapOverride.Heur
MalwarebytesMalware.AI.4250720066
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Stealer!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.4250720066?

Malware.AI.4250720066 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment