Malware.AI.1657233898 malicious file

The Malware.AI.1657233898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1657233898 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.1657233898?


File Info:
name: FF9639F89B0DBF03299C.mlw
path: /opt/CAPEv2/storage/binaries/ce1209e321999be84bcbafc7682343025cc4c7e5a610a77a9e777a9d3a430b39
crc32: 6C6269C3
md5: ff9639f89b0dbf03299ca03505c78a72
sha1: 9b0f6ebaa13a072e19ae9a2b16631bc733e71e88
sha256: ce1209e321999be84bcbafc7682343025cc4c7e5a610a77a9e777a9d3a430b39
sha512: 9191e43107a264b538c8c14d7a6af41073096e432a7256efd4bedf4587dbaf6ac2b92ba226a4cede8376c738be69c4db2b82dcccb711ed7a849ff60ba3fe95e8
ssdeep: 98304:Wjv9jvbjvNjvARlengSiEPpkplKX0MM4SbjVjvxjvDM:Wj1jjjFjoRlenXi3zjZj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AD265A033F48EB86C02A5B79C4A1D3F5A365DD45E712C64F19A43EAAFCB15E62F422C4
sha3_384: 833b380ecdeb6c68a7de1091061e2313c5104d1bbd2cccf89b1c2a680ff826b9a8759a66169b0264c51ad14e007e6353
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-07-16 18:21:42

Version Info:
Translation: 0x0000 0x04b0
FileDescription: InstalatorMultiLanguage
FileVersion: 1.0.0.0
InternalName: SimCity - InstallShield Wizard.exe
LegalCopyright: Copyright ©  2018
OriginalFilename: SimCity - InstallShield Wizard.exe
ProductName: InstalatorMultiLanguage
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1657233898 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Surveyer.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Generic.31369227
FireEye	Generic.mg.ff9639f89b0dbf03
ALYac	Trojan.Generic.31369227
Malwarebytes	Malware.AI.1657233898
Sangfor	Trojan.Win32.Wacatac.B
K7AntiVirus	Trojan ( 00546e2f1 )
Alibaba	Trojan:MSIL/Surveyer.cca3f432
K7GW	Trojan ( 00546e2f1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Surveyer.GI
APEX	Malicious
ClamAV	Win.Packed.Surveyer-6873462-0
BitDefender	Trojan.Generic.31369227
Ad-Aware	Trojan.Generic.31369227
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1236992
DrWeb	Trojan.Surveyer.205
McAfee-GW-Edition	GenericRXOZ-GY!FF9639F89B0D
Emsisoft	Trojan.Generic.31369227 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1236992
MAX	malware (ai score=85)
Arcabit	Trojan.Generic.D1DEA80B
GData	Trojan.Generic.31369227
McAfee	GenericRXOZ-GY!FF9639F89B0D
VBA32	TScope.Trojan.MSIL
Cylance	Unsafe
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:McRbbSbNxmtlesTUGAX0Hg)
Ikarus	Trojan.MSIL.Surveyer
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Surveyer.GI!tr
BitDefenderTheta	Gen:NN.ZemsilF.34606.@t0@aOQq8kg

How to remove Malware.AI.1657233898?

Malware.AI.1657233898 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X