Malware.AI.634163812 malicious file

The Malware.AI.634163812 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.634163812 virus can do?

Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

yNaxDadlXGRbtjfQHPZcGo.yNaxDadlXGRbtjfQHPZcGo

How to determine Malware.AI.634163812?


File Info:
crc32: 63B550D9
md5: 0611f63f859803549127ce2b1a739ab2
name: 0611F63F859803549127CE2B1A739AB2.mlw
sha1: 9952c5ff14242c4d0070dc6a7db2d6e5d11fd476
sha256: 4ce7973c8735d27ad5e19d91feb1d50425c70830a80e1bec15b64dce6d91e752
sha512: 4ebc1ec87146b1dcf9135a16b97cf61d89c81d7be675a4ff95beeb26c77b0cff93e47721ffc2be1bef180123ed475a92528ec30de8ebdc4bb9fb932f7e3827e4
ssdeep: 49152:emMT8Bv26j1dkkV4APbUxKp2TY0WYQug7n8WrpkA8/v9tR4L+U:erCOS1d7/AmYYXP7dp494L+U
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2005-2015 Oleg N. Scherbakov
InternalName: 7ZSfxMod
FileVersion: 1.6.0.3850
CompanyName: Oleg N. Scherbakov
PrivateBuild: February 11, 2016
ProductName: 7-Zip SFX
ProductVersion: 1.6.0.3850
FileDescription: 7z Setup SFX (x86)
OriginalFilename: 7ZSfxMod_x86.exe
Translation: 0x0000 0x04b0

Malware.AI.634163812 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0057a8111 )
Cynet	Malicious (score: 99)
Sangfor	Backdoor.Win32.Agent.myubfa
Alibaba	Backdoor:Win32/Generic.b36079cc
K7GW	Trojan ( 0057a8111 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.ACXU
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Backdoor.Win32.Agent.myubfa
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Webroot	Pua.Opencandy
Avira	TR/Patched.ahqwa
eGambit	Unsafe.AI_Score_99%
Microsoft	Program:Win32/Wacapew.C!ml
AegisLab	Trojan.Win32.Agent.m!c
ZoneAlarm	Backdoor.Win32.Agent.myubfa
AhnLab-V3	Malware/Win.Generic.C4486323
McAfee	Artemis!0611F63F8598
Malwarebytes	Malware.AI.634163812
Fortinet	PossibleThreat.ARN.H
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Malware.AI.634163812?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.634163812 malicious file