How to remove “Malware.AI.230890485”?

The Malware.AI.230890485 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.230890485 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.230890485?


File Info:
name: AFCD7557B796EDFC6E3B.mlw
path: /opt/CAPEv2/storage/binaries/855f0b4a230979200e04a134129e66cd97838ce5c41aa4b601360e8edf2ee2ad
crc32: E25D2E8F
md5: afcd7557b796edfc6e3bb8b0cab0f095
sha1: 1577314047bb1e28bf81abd6b6a8f3fd3f52dd08
sha256: 855f0b4a230979200e04a134129e66cd97838ce5c41aa4b601360e8edf2ee2ad
sha512: a61d48752a90ffc680ed1d102b432c11e10714a262d7d655afd9c50e69c4cac1a235e104afc242ef3e0feec77657f112de4e10768be4d9cbc8bb8e8157995e35
ssdeep: 49152:+jvNfsxcsN1lv9/w38datjv5jvvjv2jvwjvHfsxcs:+jvNsx3NFYnjv5jvvjv2jvwjv/sx3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6F5E7033F48EF96C12A5B78C4A0E3F593559D45E722C64F19A47EAAFCB15E62F422C0
sha3_384: 49590c310efea24ab24049621a590e67a72b59d91009bf2fee1a8a6fbb51ac66e266e7638214446434ca10cc5b6566f8
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-08-29 06:17:24

Version Info:
Translation: 0x0000 0x04b0
FileDescription: InstalatorMultiLanguage
FileVersion: 1.0.0.0
InternalName: Euro Truck Simulator 2 - InstallShield Wizard.exe
LegalCopyright: Copyright ©  2018
OriginalFilename: Euro Truck Simulator 2 - InstallShield Wizard.exe
ProductName: InstalatorMultiLanguage
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.230890485 also known as:

DrWeb	Trojan.Surveyer.205
MicroWorld-eScan	Gen:Variant.Bulz.297751
FireEye	Gen:Variant.Bulz.297751
Zillya	Trojan.Surveyer.Win32.3390
Sangfor	Trojan.Win32.Wacatac.B
K7AntiVirus	Trojan ( 00546e2f1 )
Alibaba	Trojan:MSIL/Surveyer.c908c5f2
K7GW	Trojan ( 00546e2f1 )
Cybereason	malicious.7b796e
BitDefenderTheta	Gen:NN.ZemsilF.34182.mt0@aOq13ue
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Surveyer.GI
TrendMicro-HouseCall	TROJ_GEN.R03BC0PA322
ClamAV	Win.Packed.Surveyer-6873462-0
BitDefender	Gen:Variant.Bulz.297751
NANO-Antivirus	Trojan.Win32.Surveyer.fnhwfd
Avast	Win32:Trojan-gen
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R03BC0PA322
McAfee-GW-Edition	GenericRXRG-FW!AFCD7557B796
Emsisoft	Gen:Variant.Bulz.297751 (B)
Ikarus	Trojan.MSIL.Surveyer
Avira	HEUR/AGEN.1236992
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.297751
Malwarebytes	Malware.AI.230890485
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:inxrkAL7oRT8M/LiINZR5Q)
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Surveyer.GI!tr
AVG	Win32:Trojan-gen

How to remove Malware.AI.230890485?

Malware.AI.230890485 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X