Malware

Malware.AI.4264161528 removal tips

Malware Removal

The Malware.AI.4264161528 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4264161528 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Malware.AI.4264161528?


File Info:

crc32: 278926B9
md5: 914d105713ebca3ac6ddcb1ed43b3836
name: 914D105713EBCA3AC6DDCB1ED43B3836.mlw
sha1: ff299210bde293dc1ac4e2d3bb510c89ff774f4f
sha256: 21386155dbba76e738612b7686d5e73416d1458c715dde2f345cf68046cccba2
sha512: 488a3f27cfb3eb780d769f74a095dcdd2a695d4eba1244065d020dad52e06955e03b2f3868e5494a78c4576707d2d56c3b5b5bfefcc6c29aabf83d034cc69772
ssdeep: 6144:v0Ds3/Mc+3Fjc1uqxT0gfgS7Cuy8S38/2aaaaaaTaaaaafaaaaaaMaaaaaqSUjx:84/P+1jNqT0kM8S38/gnx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4264161528 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0053cd001 )
LionicTrojan.Win32.Stealer.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.24300
CynetMalicious (score: 100)
ALYacGen:Variant.Cerbu.17493
CylanceUnsafe
ZillyaTrojan.Stealer.Win32.656
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojanSpy:Win32/Stealer.febe79f1
K7GWTrojan ( 0053cd001 )
Cybereasonmalicious.713ebc
CyrenW32/FakeAlert.DX.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GKVJ
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Spy.Win32.Stealer.ih
BitDefenderGen:Variant.Cerbu.17493
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Variant.Cerbu.17493
TencentWin32.Trojan-spy.Stealer.Hqlh
Ad-AwareGen:Variant.Cerbu.17493
SophosMal/Generic-S
ComodoMalware@#9bjt8a2le7vq
BitDefenderThetaAI:Packer.64E0143020
McAfee-GW-EditionBehavesLike.Win32.Upatre.fm
FireEyeGeneric.mg.914d105713ebca3a
EmsisoftGen:Variant.Cerbu.17493 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1140588
MicrosoftTrojan:Win32/Occamy.C21
ArcabitTrojan.Cerbu.D4455
GDataGen:Variant.Cerbu.17493
Acronissuspicious
McAfeeArtemis!914D105713EB
MAXmalware (ai score=100)
MalwarebytesMalware.AI.4264161528
PandaTrj/CI.A
RisingTrojan.Generic@ML.92 (RDML:KcuFbe1eaufcYBVw4sywRw)
YandexTrojan.GenAsa!K8/tgPjh5bY
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HIMG!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Malware.AI.4264161528?

Malware.AI.4264161528 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment