Malware

Malware.AI.4279808273 removal guide

Malware Removal

The Malware.AI.4279808273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4279808273 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process created a hidden window
  • Drops a binary and executes it
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
8394cdb.ns1.dnsdynnet.com
whos.amung.us
widgets.amung.us

How to determine Malware.AI.4279808273?


File Info:

crc32: 9662C40F
md5: 99c0f62f6c093ae4f315f99b998b2ad4
name: 99C0F62F6C093AE4F315F99B998B2AD4.mlw
sha1: c7b190780795a0af8fd46cca64b9e37bf064ab1d
sha256: ed670dee2efcde7ee8455c88d8e03b3929e63e81ee2fd791dee56928dcaf875a
sha512: 0f95b696f3d71674b3642cdf1577a8ea9901e47d103f5123c6563697ed0bb690340983b89c77590a9ad986e334937f950a116cd27aaa892468a89149c89ffcfc
ssdeep: 1536:/u2C18ttBAK+BZ3aWfzMA9x5ujJXQN9yt+y967S7gnXz3bbR+i1ErY6br8Dr+RM:WrBZ3aWfoa5u1mW7gnXz3Cjo+Rpvo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4279808273 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0057a5711 )
LionicTrojan.Win32.Zbot.luw0
Elasticmalicious (high confidence)
DrWebTrojan.Siggen13.3028
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.46113712
CylanceUnsafe
ZillyaTrojan.Injector.Win32.902196
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaVirTool:Win32/VBInject.6c0212d4
K7GWTrojan ( 0057a5711 )
Cybereasonmalicious.f6c093
CyrenW32/AntiAV.L.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.AETA
APEXMalicious
AvastWin32:DangerousSig [Trj]
ClamAVWin.Trojan.Generic-9763885-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.GenericKD.46113712
NANO-AntivirusTrojan.Win32.VB.itpfye
MicroWorld-eScanTrojan.GenericKD.46113712
TencentMalware.Win32.Gencirc.11bea007
Ad-AwareTrojan.GenericKD.46113712
SophosMal/Generic-R + Mal/VB-ARA
ComodoMalware@#anc68f51489o
BitDefenderThetaAI:Packer.EA9FDCE820
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.vz
FireEyeGeneric.mg.99c0f62f6c093ae4
EmsisoftTrojan.GenericKD.46113712 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.5234A5
MicrosoftVirTool:Win32/VBInject.gen!IT
GDataTrojan.GenericKD.46113712
AhnLab-V3Trojan/Win32.AntiAV.R58553
McAfeeGenericRXAA-AA!99C0F62F6C09
MAXmalware (ai score=81)
VBA32BScope.Trojan.Diple
MalwarebytesMalware.AI.4279808273
PandaTrj/Genetic.gen
IkarusVirus.Win32.VBInject
FortinetW32/AntiAV.RIB!tr
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml

How to remove Malware.AI.4279808273?

Malware.AI.4279808273 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment