Malware

Malware.AI.533702254 removal instruction

Malware Removal

The Malware.AI.533702254 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.533702254 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Sniffs keystrokes
  • Network activity contains more than one unique useragent.
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

nikss.webtm.ru
www.bing.com
bandakere.tumblr.com
iplogger.org
ocsp.comodoca.com
ocsp.usertrust.com
ocsp.sectigo.com

How to determine Malware.AI.533702254?


File Info:

crc32: D585A0E3
md5: 019006cf7147712b8afbc7f031f347a2
name: 019006CF7147712B8AFBC7F031F347A2.mlw
sha1: d9b80b5092d447d611c35d0879940bb45e1fb323
sha256: 40efd41d17fb832b13911977e0931d1e556aad35a78d1c40101932f9d5fb0eac
sha512: d5b0f6359cae35920f03ad28a5a86fee80d10919cbc138973f0096cdb75ccf0f9eaca4c8bb7b97f6cf467cc540cab751bf93fff6aef3f9f8c775a64f6836f544
ssdeep: 12288:VOOfN590uu6opX+t4sP+Zx4e2ym7dWqzERnVqWSU15lMf4+HhGw3cW0zFg:YOfNkuu6oLsixr2ymhWS0DScPMfN3cNq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.533702254 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 700000111 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacAIT:Trojan.Nymeria.4747
CrowdStrikewin/malicious_confidence_60% (W)
K7GWTrojan ( 700000111 )
Cybereasonmalicious.092d44
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.PDT
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Chapak.ezqu
BitDefenderAIT:Trojan.Nymeria.4747
MicroWorld-eScanAIT:Trojan.Nymeria.4747
SophosGeneric ML PUA (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.jc
FireEyeGeneric.mg.019006cf7147712b
EmsisoftAIT:Trojan.Nymeria.4747 (B)
WebrootW32.Trojan.Gen
MicrosoftTrojan:Script/Phonzy.A!ml
GDataAIT:Trojan.Nymeria.4747 (2x)
McAfeeDownloader-AutoIt.u
MAXmalware (ai score=87)
MalwarebytesMalware.AI.533702254
FortinetW32/Autoit.PDT!tr.dldr
AVGWin32:Trojan-gen

How to remove Malware.AI.533702254?

Malware.AI.533702254 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment