Categories: Trojan

Should I remove “TrojanDownloader:Win32/Sysfade.B”?

The TrojanDownloader:Win32/Sysfade.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Sysfade.B virus can do?

Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempts to modify proxy settings
Creates a copy of itself
Touches a file containing cookies, possibly for information gathering
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine TrojanDownloader:Win32/Sysfade.B?


File Info:
name: 7C7BD195637ED9A2E9C2.mlwpath: /opt/CAPEv2/storage/binaries/e3c07d5998cd6a2286c87e65261704b18bf2cac7d0c21d78ce1c2f960378e130crc32: E90EBF28md5: 7c7bd195637ed9a2e9c219bbe09fddb5sha1: d1e419bc5ecc72d7da058ce2b53e0a4a91e0965dsha256: e3c07d5998cd6a2286c87e65261704b18bf2cac7d0c21d78ce1c2f960378e130sha512: bd0d082db889862bf59c757d394a67aadd5958cc46573e9230f8db1e0c447b3eb3be3c86aa8fd95f547eb6e942f9555017a9f67850048bb8731733e1a66fab0essdeep: 6144:rqaKvl+yO5717ZxwMd483KXdV5CmEhIAsdxn6sM0TZMl9VJdzh5vaBAzuHs:WaUl+yO5717ZtK7EhIAsdxn6sM0TZMl1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C9446C25B0C5C47ACB0E00F4C9C66BFEA6E96DBCD91151835FC4BF2DBA329A68512347sha3_384: a08b2b84a89953051a95588f963121545304023869f11281786ba2198c26f08e78167201e2e583f234c4f26d47b9864cep_bytes: 558bec6aff6828824200687405410064timestamp: 2010-07-29 05:43:21
Version Info:
0: [No Data]

TrojanDownloader:Win32/Sysfade.B also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
MicroWorld-eScan	Trojan.Generic.6304245
ClamAV	Win.Downloader.96481-1
FireEye	Generic.mg.7c7bd195637ed9a2
CAT-QuickHeal	TrojanDownloader.Agent
ALYac	Trojan.Generic.6304245
Cylance	unsafe
Zillya	Downloader.Agent.Win32.68341
Sangfor	PUP.Win32.StartPage.Vq8s
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Malware:Win32/km_28620.None
K7GW	Trojan ( 00565a671 )
K7AntiVirus	Trojan ( 00565a671 )
Arcabit	Trojan.Generic.D6031F5
BitDefenderTheta	AI:Packer.CE9169331E
VirIT	Trojan.Win32.Generic.FSM
Cyren	W32/Trojan.QIXU-7273
Symantec	Adware.Favorit
Elastic	malicious (high confidence)
ESET-NOD32	Win32/StartPage.NVY
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Agent.ecvt
BitDefender	Trojan.Generic.6304245
NANO-Antivirus	Trojan.Win32.Agent.bpcli
Avast	Win32:StartPage-ALY [Trj]
Tencent	Trojan.Win32.Downloader.abi
TACHYON	Trojan-Downloader/W32.Agent.274432.AU
Sophos	Mal/Generic-R
F-Secure	Trojan.TR/Downloader.Gen
DrWeb	Trojan.DownLoad2.14890
VIPRE	Trojan.Generic.6304245
TrendMicro	TROJ_DLOAD.SMCV
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Emsisoft	Trojan.Generic.6304245 (B)
Ikarus	Trojan-Downloader.Win32.Gamov
Jiangmin	TrojanDownloader.Generic.agd
Webroot	W32.Malware.Gen
Avira	TR/Downloader.Gen
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Xcitium	TrojWare.Win32.Downloader.Agent.ecvt@23m9x0
Microsoft	TrojanDownloader:Win32/Sysfade.B
ViRobot	Trojan.Win32.A.Downloader.274432.H
ZoneAlarm	Trojan-Downloader.Win32.Agent.ecvt
GData	Trojan.Generic.6304245
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R6934
McAfee	Downloader-CKO
MAX	malware (ai score=80)
VBA32	TrojanDownloader.Agent
Malwarebytes	Malware.AI.2737249420
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_DLOAD.SMCV
Rising	Trojan.Win32.Fednu.amu (CLASSIC)
Yandex	Trojan.GenAsa!PCsQ8PJzzXQ
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.ECVT!tr.dldr
AVG	Win32:StartPage-ALY [Trj]
Cybereason	malicious.5637ed
DeepInstinct	MALICIOUS