How to remove "TrojanDownloader:Win32/Andromeda.SIBE!MTB"?

The TrojanDownloader:Win32/Andromeda.SIBE!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Andromeda.SIBE!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Andromeda.SIBE!MTB?


File Info:
name: EFE7F84E54AE4FA109AC.mlw
path: /opt/CAPEv2/storage/binaries/06ee927e758054e7bb458ceee693e6bb2069dc7c35095dea1e93b251f3bf6595
crc32: D0FBB361
md5: efe7f84e54ae4fa109ac75b2244cdddd
sha1: 45186e5bf563e6b55e8ca3152255abef35fa0e60
sha256: 06ee927e758054e7bb458ceee693e6bb2069dc7c35095dea1e93b251f3bf6595
sha512: b636a87516e4244daab6df2519cb979dd6b75d7e6c6a5ca9fce70101ee6de5a90d84643b19a9c1e0ba5ac2c3de63c37f89795a662335b7c78487a3992de72222
ssdeep: 48:SsGp63gAST0cMLlD7prUlG9Nzgrz7Uqt+9bCdk8WkBhVpSS6ijiDTWQW/rhQ2Oes:VGEETrMLH500ek8BLSEuDTWjQTkGX8O
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D8D1344793224B92DC143BBA1F558683B6AC8C1EB9384CA1A0C45D176E9C80F5CEFC5F
sha3_384: fd7b4b0a1496bf4836af9f1b890686b1b449893eb24e1061311858c986553ded6e123b80927acd0c376bd14738b882a8
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2013-05-07 21:01:07

Version Info:
0: [No Data]

TrojanDownloader:Win32/Andromeda.SIBE!MTB also known as:

Bkav	W32.FamVT.DundpilVM.Worm
Elastic	malicious (high confidence)
DrWeb	Worm.Siggen.12291
MicroWorld-eScan	Trojan.GenericKDZ.97972
CAT-QuickHeal	Trojan.Agent.WL
Skyhigh	BehavesLike.Win32.Worm.xz
McAfee	W32/Worm-FKH!EFE7F84E54AE
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.AgentGen.Win32.2
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	EmailWorm ( 0040f50c1 )
K7GW	EmailWorm ( 0040f50c1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZedlaF.36802.aq5@aGt47gh
VirIT	Trojan.Win32.Zyx.AKA
Symantec	Trojan Horse
tehtris	Generic.Malware
ESET-NOD32	Win32/Bundpil.AF
APEX	Malicious
TrendMicro-HouseCall	WORM_GAMARUE.SMP
ClamAV	Win.Adware.Downware-235
Kaspersky	Worm.Win32.Agent.bua
BitDefender	Trojan.GenericKDZ.97972
NANO-Antivirus	Trojan.Win32.Agent.cqkydi
SUPERAntiSpyware	Worm.Gamarue
Avast	Win32:Agent-ARGL [Wrm]
Tencent	Worm.Win32.Agent.c
Emsisoft	Trojan.GenericKDZ.97972 (B)
F-Secure	Trojan.TR/Rogue.189412
Baidu	Win32.Worm.Agent.ba
VIPRE	Trojan.GenericKDZ.97972
TrendMicro	WORM_GAMARUE.SMP
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.efe7f84e54ae4fa1
Sophos	Troj/Agent-ACCV
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=88)
Jiangmin	Worm/Agent.coh
Webroot	W32.Suspicious.Heur
Google	Detected
Avira	TR/Rogue.189412
Varist	W32/Csyr.B.gen!Eldorado
Antiy-AVL	Worm/Win32.Agent
Kingsoft	malware.kb.a.989
Microsoft	TrojanDownloader:Win32/Andromeda.SIBE!MTB
Xcitium	Worm.Win32.Bundpil.AH@4yjufs
Arcabit	Trojan.Generic.D17EB4
ViRobot	Trojan.Win32.Agent.7211
ZoneAlarm	Worm.Win32.Agent.bua
GData	Win32.Trojan.PSE.1YK3EUJ
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Agent.R68167
VBA32	Worm.Gamarue
ALYac	Trojan.GenericKDZ.97972
Cylance	unsafe
Panda	W32/WinSxsBot.B.worm
Rising	Worm.Gamarue!1.9CB3 (CLASSIC)
Ikarus	Worm.Win32.Bundpil
MaxSecure	Worm.Agent.bua
Fortinet	W32/Bundpil.AF!worm
AVG	Win32:Agent-ARGL [Wrm]
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/Bundpil.fdeaaaeb