Trojan

Trojan-Dropper.Win32.Sysn.cbdk malicious file

Malware Removal

The Trojan-Dropper.Win32.Sysn.cbdk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Sysn.cbdk virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
fezzkc.hopto.org

How to determine Trojan-Dropper.Win32.Sysn.cbdk?


File Info:

crc32: 09EA1A4B
md5: d8a2be808fb07cb43599a0b4f16be370
name: D8A2BE808FB07CB43599A0B4F16BE370.mlw
sha1: c92d6b61675c0b0dda131a6bc3a8bf090fa47ada
sha256: 382fcb5a9da7c841b02864a745157c9a099c1b842ea64501481be9514da66c1d
sha512: 46635ec1d455457c342b63b960cb5217f7382368f5037899d6dd62ca946a1d04eb17c028ba972b5fd15780e3e826e6057c5dd02f5f63ea87a8fb749f4f81e8f0
ssdeep: 12288:JBiE6ZY3B/I4gRupNqSNWDrQmuBdvhNGafiuvsyfzQiyKSg16lC1kuBftuKrSO4:HkZXjM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2009
Assembly Version: 1.0.0.0
InternalName: Syste.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
Comments: Yahtzee System
ProductName: Yahtzee
ProductVersion: 1.0.0.0
FileDescription: Yahtzee
OriginalFilename: Syste.exe

Trojan-Dropper.Win32.Sysn.cbdk also known as:

K7AntiVirusTrojan ( 004f7a301 )
LionicTrojan.Win32.Sysn.b!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader22.21146
CynetMalicious (score: 99)
CylanceUnsafe
ZillyaTrojan.Generic.Win32.1456274
SangforTrojan.Win32.Sysn.8
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaTrojanDropper:Win32/Generic.e59132f8
K7GWTrojan ( 004f7a301 )
Cybereasonmalicious.1675c0
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Dropper.Win32.Sysn.cbdk
NANO-AntivirusTrojan.Win32.Drop.egbubi
TencentWin32.Trojan-dropper.Sysn.Wtdi
SophosMal/Generic-S
ComodoMalware@#1cuw9cv9ce579
BitDefenderThetaGen:NN.ZemsilF.34266.Gm0@ayFKbF
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R007C0PGP21
McAfee-GW-EditionGeneric.aih
FireEyeGeneric.mg.d8a2be808fb07cb4
SentinelOneStatic AI – Malicious PE
AviraTR/AD.RevengeRAT.dwwzu
eGambitUnsafe.AI_Score_77%
MicrosoftBackdoor:Win32/Bladabindi!ml
GDataWin32.Trojan.Agent.TE228S
McAfeeGeneric.aih
VBA32TrojanDropper.Sysn
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R007C0PGP21
YandexTrojan.DR.Sysn!WwquMFAbOeY
MaxSecureTrojan.Malware.300983.susgen
FortinetGenerik.JTLVAKF!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-Dropper.Win32.Sysn.cbdk?

Trojan-Dropper.Win32.Sysn.cbdk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment