Spammer:Win32/Sispotat.A removal guide

The Spammer:Win32/Sispotat.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Spammer:Win32/Sispotat.A virus can do?

Authenticode signature is invalid

How to determine Spammer:Win32/Sispotat.A?


File Info:
name: 4919D1ACF2F6851D1318.mlw
path: /opt/CAPEv2/storage/binaries/b2535e7368753eb363887dc1d06033e5a6133c6f630f79fb98429a8d4c016fa3
crc32: D3606804
md5: 4919d1acf2f6851d1318e2750e8d372e
sha1: a30a3280b349372ccc0f43e1caebb3c6c1858415
sha256: b2535e7368753eb363887dc1d06033e5a6133c6f630f79fb98429a8d4c016fa3
sha512: 4616353d34b29e5cd0e8171a626bd58e9d620370a9560a67f09b01f124a314d6fb590c056788898d9f4abd1a0754daffb810485118a858bcf325260dddd17d2b
ssdeep: 3072:94yPkoM0pFFSquX+ddkKiO4xTv/3lYfy2:93PKoFFNfiO4If
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T169E36CAB3CC28872E989C1316B386760E679DC3526114417F79D0E993F0BDE6C62DB47
sha3_384: 7023e30e60189792ebd5c0dca8c4d5d7903bf7750d1f50bc5cd115a0962962089c3ed52e9f2cbad237667c0b7f030b6e
ep_bytes: e894030000e9b3fdffffff2514814100
timestamp: 2014-01-21 14:18:25

Version Info:
Comments: Authors and contributors include P.Mendes, M.Neal, G.Vollant, T.Charron, T.Musson, H.Pesonen, A.Donchey, C.Hyde
CompanyName: http://www.blat.net/
FileDescription: A Win32 command line eMail tool
FileVersion: 3.1.1
InternalName: blat
LegalCopyright: No copyright at all
LegalTrademarks: 
OriginalFilename: blat.exe
PrivateBuild: 
ProductName: Blat
ProductVersion: 3.1.1
SpecialBuild: 
Translation: 0x0409 0x04b0

Spammer:Win32/Sispotat.A also known as:

McAfee	GenericRXAA-FA!4919D1ACF2F6
K7AntiVirus	Trojan ( 004db2111 )
K7GW	Trojan ( 004db2111 )
BitDefenderTheta	Gen:NN.ZexaCO.36348.ju0@aqGGupmi
Cyren	W32/Blat.B.gen!Eldorado
Symantec	PUA.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spammer.Agent.X
APEX	Malicious
Kaspersky	not-a-virus:Client-SMTP.Win32.Blat.gl
NANO-Antivirus	Trojan.Win32.Bagsu.fcgpxx
Avast	FileRepMalware [Trj]
F-Secure	Heuristic.HEUR/AGEN.1307006
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Jiangmin	Client-SMTP.Blat.fa
Avira	HEUR/AGEN.1307006
Antiy-AVL	Trojan/Win32.TSGeneric
ZoneAlarm	not-a-virus:Client-SMTP.Win32.Blat.gl
Microsoft	Spammer:Win32/Sispotat.A
Google	Detected
AhnLab-V3	Malware/Win.TrojanHorse.R455650
VBA32	suspected of Trojan.Downloader.gen
Rising	Spammer.Agent!8.418 (TFE:5:hmrY9jXxQ8K)
Yandex	Trojan.GenAsa!VHjp96EvZIM
MaxSecure	not-a-virus:.SMTP.Cmpnt.Blat.a
AVG	FileRepMalware [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_60% (D)

How to remove Spammer:Win32/Sispotat.A?

Spammer:Win32/Sispotat.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X