Malware.AI.4293764105 removal instruction

The Malware.AI.4293764105 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4293764105 virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.4293764105?


File Info:
crc32: C2C8BD85
md5: fef87251efdd001c62aa07bc8a85bd79
name: FEF87251EFDD001C62AA07BC8A85BD79.mlw
sha1: c04d93076edc346c211949af0815698470b958a2
sha256: 6f5ac91ac3489ef4def1b971aa27e78c912278793d532ca6d34965bb769001c6
sha512: 66456273ccf4694f275247f0e3cce934845a5939186d03b3710c55db09f3c731615bca26bd74d9bdb6f4a0936b3105430611160b9c6501acd98322182ad7cad6
ssdeep: 24576:EZ0FgXJ2uuOKYtpnjHnY1AUZLQfRWnMjd6BE57eUdTDK:E+a3MYtpjnYrlIRWnw6BE57lxm
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright 2009 The Apache Software Foundation.
InternalName: ab.exe
FileVersion: 2.2.14
CompanyName: Apache Software Foundation
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
FileDescription: ApacheBench command line utility
OriginalFilename: ab.exe
Translation: 0x0409 0x04b0

Malware.AI.4293764105 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Symmi.21621
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Metla.d125111f
Cybereason	malicious.1efdd0
Cyren	W32/Trojan.LZQP-1053
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Metla.a
BitDefender	Gen:Variant.Razy.885575
MicroWorld-eScan	Gen:Variant.Razy.885575
Ad-Aware	Gen:Variant.Razy.885575
Sophos	Generic PUA MA (PUA)
Comodo	MalCrypt.Indus!@1qrzi1
BitDefenderTheta	Gen:NN.ZexaF.34770.wnLfauDbxami
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WFU21
McAfee-GW-Edition	BehavesLike.Win32.Injector.tc
FireEye	Generic.mg.fef87251efdd001c
Emsisoft	Gen:Variant.Razy.885575 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Swrort
Avira	TR/Metla.sxlqx
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Win32.Packed.NoobyProtect.B
AhnLab-V3	Trojan/Win.Metla.C4538119
McAfee	Artemis!FEF87251EFDD
MAX	malware (ai score=87)
VBA32	Trojan.Metla
Malwarebytes	Malware.AI.4293764105
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WFU21
Tencent	Win32.Trojan.Metla.Ejfc
Ikarus	Trojan.Win32.Swrort
MaxSecure	Trojan.Malware.11441457.susgen
Fortinet	W32/Metla.A!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Generic.HwsBM3cA

How to remove Malware.AI.4293764105?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.4293764105 removal instruction