Malware

How to remove “Malware.AI.4261749755”?

Malware Removal

The Malware.AI.4261749755 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4261749755 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Deletes its original binary from disk
  • Steals private information from local Internet browsers
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Creates a hidden or system file
  • Creates a copy of itself
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed instant messenger clients
  • Harvests information related to installed mail clients
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
azmtool.us

How to determine Malware.AI.4261749755?


File Info:

crc32: 0536158F
md5: 339fedf77e466d75dc3d7197fafa2ac3
name: 339FEDF77E466D75DC3D7197FAFA2AC3.mlw
sha1: 7f3f2283d3f3dba31af9f6e1f46acf1b34b94fcb
sha256: 15714789278a8827254387292087ebc9d60a56b4ece470e82db1027a064755c4
sha512: eac02dac88a0a043189681a30a86a07d153dde990e933feff25a6f12f2b3e094724ba8a09e972cd25a51e524c9c502488f6c1878742129668f75edf063b9d0da
ssdeep: 3072:2FmVw6tfg2Cwc3b6q72qnfTs3EIjmG0TZnuAyU6cIEABnTV1KYNI/8MiE3AoS5xf:2YYvjaqnYDSZuJUApqX/rAVGXMW+R
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Malware.AI.4261749755 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanDropped:Trojan.GenericKDZ.72815
CAT-QuickHealTrojan.Agent
ALYacDropped:Trojan.GenericKDZ.72815
CylanceUnsafe
AegisLabTrojan.Win32.Agent.4!c
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005772cf1 )
BitDefenderDropped:Trojan.GenericKDZ.72815
K7GWTrojan ( 005772cf1 )
CyrenW32/Injector.AEF.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Agent.gen
AlibabaTrojan:Win32/Lokibot.eaab3aeb
NANO-AntivirusTrojan.Win32.Inject4.ijesbq
RisingTrojan.Injector!8.C4 (CLOUD)
Ad-AwareDropped:Trojan.GenericKDZ.72815
SophosMal/Generic-S
ComodoMalware@#2jijzgjqbxmr8
F-SecureTrojan.TR/Injector.lwyhj
DrWebTrojan.Inject4.6956
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_FRS.0NA103B421
McAfee-GW-EditionBehavesLike.Win32.Vopak.cc
FireEyeGeneric.mg.339fedf77e466d75
EmsisoftTrojan.Injector (A)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Trojan.Genkdz
AviraTR/AD.LokiBot.hsuvr
eGambitUnsafe.AI_Score_87%
MAXmalware (ai score=80)
Antiy-AVLTrojan/Win32.Injector
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/Lokibot.VAM!MTB
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Generic.D11C6F
ViRobotTrojan.Win32.S.Agent.167073
ZoneAlarmHEUR:Backdoor.Win32.Androm.gen
GDataWin32.Trojan-Stealer.LokiBot.UWF9JP
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.R364385
McAfeeRDN/Generic.dx
MalwarebytesMalware.AI.4261749755
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.EOJZ
TrendMicro-HouseCallTROJ_FRS.0NA103B421
TencentWin32.Trojan.Agent.Ljkp
IkarusTrojan.Win32.Injector
FortinetW32/EOJZ!tr
BitDefenderThetaGen:NN.ZedlaF.34804.aq4@auzJA3ai
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.77e466
AvastWin32:PWSX-gen [Trj]
Qihoo-360Win32/Trojan.Generic.HyoDCxsA

How to remove Malware.AI.4261749755?

Malware.AI.4261749755 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment