Trojan

How to remove “TrojanDownloader:Win32/Andromeda.SIB!MTB”?

Malware Removal

The TrojanDownloader:Win32/Andromeda.SIB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Andromeda.SIB!MTB virus can do?

  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanDownloader:Win32/Andromeda.SIB!MTB?


File Info:

crc32: 85A87389
md5: b08ffe9d0f50637a557f7f2d598c8973
name: B08FFE9D0F50637A557F7F2D598C8973.mlw
sha1: 86719f1b678c402e0d65523b980f95d5461ef181
sha256: 02c564e506cf205d4af742ef9b217c197e1b1801bc186554f0b8397286e0fc9f
sha512: 6d76fe3bf24e7ae0b013a67012c888303da441865995e5264739a597f63663a2105d325071974394dc07c51e7618eb200799531f24bf4debd2c8da4763f3a53b
ssdeep: 3072:BbpfhDOW7hBhr4pX5r9x29x0LMppfjgeGryEl8WZmID8ECK:JJhBhrAXvQKL6cFR8/IDoK
type: PE32 executable (Unknown subsystem 0x0) Unknown processor type 0x0 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

TrojanDownloader:Win32/Andromeda.SIB!MTB also known as:

BkavW32.FamVT.BlockerVM.Trojan
K7AntiVirusTrojan ( 0040679b1 )
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner1.33453
ClamAVWin.Worm.Drolnux-6796867-0
CAT-QuickHealTrojan.BlockerPMF.S17351719
ALYacTrojan.GenericKDZ.61973
MalwarebytesSimbot.Backdoor.Stealer.DDS
ZillyaTrojan.Blocker.Win32.28139
SangforTrojan.Win32.Save.a
K7GWTrojan ( 0040679b1 )
Cybereasonmalicious.d0f506
BaiduWin32.Worm.Agent.z
CyrenW32/Drolnux.A.gen!Eldorado
SymantecTrojan Horse
APEXMalicious
AvastWin32:Sg-C [Trj]
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKDZ.61973
MicroWorld-eScanTrojan.GenericKDZ.61973
TencentTrojan.Win32.Blocker.aad
Ad-AwareTrojan.GenericKDZ.61973
SophosML/PE-A + W32/Gamarue-DA
ComodoTrojWare.Win32.Ransom.Blocker.adf@4tx1ae
BitDefenderThetaGen:NN.ZedlaF.34088.aq4@aubLRpe
VIPRETrojan-Ransom.Win32.Blocker.mgn (v)
TrendMicroTROJ_DROLNUX_EC200002.UVPA
McAfee-GW-EditionBehavesLike.Win32.Dropper.ch
FireEyeTrojan.GenericKDZ.61973
EmsisoftTrojan.GenericKDZ.61973 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Blocker.bak
AviraTR/Rogue.79566412
Antiy-AVLTrojan/Generic.ASBOL.DD2
MicrosoftTrojanDownloader:Win32/Andromeda.SIB!MTB
ArcabitTrojan.Generic.DF215
GDataTrojan.GenericKDZ.61973
AhnLab-V3Trojan/Win32.Blocker.R46547
Acronissuspicious
McAfeeGeneric-FAHD!B08FFE9D0F50
MAXmalware (ai score=81)
TrendMicro-HouseCallTROJ_DROLNUX_EC200002.UVPA
RisingWorm.Drolnux!1.9CC3 (CLASSIC)
IkarusTrojan-Ransom.Blocker
MaxSecureTrojan-Ransom.Blocker.mgn
AVGWin32:Sg-C [Trj]

How to remove TrojanDownloader:Win32/Andromeda.SIB!MTB?

TrojanDownloader:Win32/Andromeda.SIB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment