About “Malware.AI.4237109357” infection

The Malware.AI.4237109357 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4237109357 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Malware.AI.4237109357?


File Info:
crc32: 5AB28A76
md5: 2c2b3480a4bd3dae5747401100235fbe
name: 2C2B3480A4BD3DAE5747401100235FBE.mlw
sha1: 237a5411060d712c8dde6922d206c1cd33d9d638
sha256: c1c6b3f0cd2a4e5d8191cbb04b6d9d944049aaa080e377874603c789b5e17d5d
sha512: fb309da4dfb27364e75d0ba4899ba89b55bcfc541e54838e6542ee2b195e747fa3c5ce35157820860f204693fb7587e234aed974d649b2d08a88f48629a1b7e2
ssdeep: 49152:x1FgQ/Ar1FgQ/A51FgQ/AvU0Igt6m1FgQ/A91FgQ/A:7IJITIvU0Rt6GIvI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: Dragon Age Installer.exe
FileVersion: 1.0.0.0
ProductName: Dragon Age Installer
ProductVersion: 1.0.0.0
FileDescription: Dragon Age Installer
OriginalFilename: Dragon Age Installer.exe

Malware.AI.4237109357 also known as:

K7AntiVirus	Trojan ( 0050025b1 )
Lionic	Trojan.Win32.Perseus.4!c
DrWeb	Trojan.Surveyer.120
ALYac	Gen:Variant.MSILPerseus.104300
Cylance	Unsafe
Sangfor	Trojan.Win32.Surveyer.8
BitDefender	Gen:Variant.MSILPerseus.104300
K7GW	Trojan ( 0050025b1 )
Cybereason	malicious.0a4bd3
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Surveyer.EQ
APEX	Malicious
Alibaba	Trojan:MSIL/Surveyer.9ce3ca9b
NANO-Antivirus	Trojan.Win32.Surveyer.fjnvbb
MicroWorld-eScan	Gen:Variant.MSILPerseus.104300
Ad-Aware	Gen:Variant.MSILPerseus.104300
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.Bt0@aKFzdkb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.MSILPerseus.104300
Emsisoft	Gen:Variant.MSILPerseus.104300 (B)
SentinelOne	Static AI – Malicious PE
Webroot	Pua.Downloadmanager
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.MSILPerseus.D1976C
GData	Gen:Variant.MSILPerseus.104300
McAfee	Artemis!2C2B3480A4BD
MAX	malware (ai score=85)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.4237109357
TrendMicro-HouseCall	TROJ_GEN.R002H0CH221
Ikarus	Trojan.MSIL.Surveyer
MaxSecure	Trojan.Malware.300983.susgen
Paloalto	generic.ml

How to remove Malware.AI.4237109357?

Malware.AI.4237109357 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X