Malware

Malware.AI.4259665732 removal guide

Malware Removal

The Malware.AI.4259665732 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4259665732 virus can do?

  • Network activity detected but not expressed in API logs
  • Unusual version info supplied for binary

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4259665732?


File Info:

crc32: D1C68FC3
md5: e305ff2c55077f6916cb439fa596363c
name: E305FF2C55077F6916CB439FA596363C.mlw
sha1: 0016c11b2608d25bf211d8dfe922d9b5a74654a9
sha256: 5f3d7377ecd01ee0499263a936d5d5c154c72148d65ba45e45aa7e635962e87b
sha512: bbf543eecc16a30cf0fdc7ac0273c8b2c1b79f0dc0fab827fea6e98b5c06cc5734619030cd8fca360a9de5e1fef31c07b6b6e951b244a80474431db04e046e28
ssdeep: 24576:QvJSRA9RA9RA7MjRAxMpMLaZbJcPRMy5iJ1RAKMzMjRA+Rbi:Q4wwAMtKMpMLaZbJcqVJb7MzMtx
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2017
Assembly Version: 1.0.0.0
InternalName: Notepad.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Notepad
ProductVersion: 1.0.0.0
FileDescription: Notepad
OriginalFilename: Notepad.exe

Malware.AI.4259665732 also known as:

K7AntiVirusUnwanted-Program ( 004d38111 )
LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
DrWebTrojan.KillFiles.63339
CAT-QuickHealPUA.InjectorFC.S20328770
ALYacGen:Variant.Application.MSILPerseus.12029
CylanceUnsafe
ZillyaTrojan.DllInject.Win32.13377
CrowdStrikewin/malicious_confidence_80% (D)
K7GWUnwanted-Program ( 004d38111 )
Cybereasonmalicious.c55077
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/DllInject.CJ potentially unsafe
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
Kasperskynot-a-virus:HEUR:RiskTool.Win32.Generic
BitDefenderGen:Variant.Application.MSILPerseus.12029
NANO-AntivirusRiskware.Win32.KillFiles.fffkbk
MicroWorld-eScanGen:Variant.Application.MSILPerseus.12029
TencentMalware.Win32.Gencirc.10c9dc5d
Ad-AwareGen:Variant.Application.MSILPerseus.12029
SophosMal/MsilInj-G
ComodoMalware@#1pht4wp66iizl
BitDefenderThetaGen:NN.ZemsilF.34266.wn0@aCXVFed
McAfee-GW-EditionGenericRXGB-XU!E305FF2C5507
FireEyeGeneric.mg.e305ff2c55077f69
EmsisoftGen:Variant.Application.MSILPerseus.12029 (B)
AviraTR/Hijacker.Gen
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataGen:Variant.Application.MSILPerseus.12029
AhnLab-V3Unwanted/Win32.Agent.C2715906
McAfeeGenericRXGB-XU!E305FF2C5507
MAXmalware (ai score=98)
VBA32BScope.Trojan.Snojan
MalwarebytesMalware.AI.4259665732
PandaTrj/GdSda.A
YandexRiskware.Agent!+uHkTvnpMTo
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Generic
AVGWin32:MalwareX-gen [Trj]

How to remove Malware.AI.4259665732?

Malware.AI.4259665732 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment