Categories: SpyTrojan

How to remove “TrojanSpy:MSIL/Siplog.B”?

The TrojanSpy:MSIL/Siplog.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:MSIL/Siplog.B virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
Expresses interest in specific running processes
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Detects Sandboxie through the presence of a library
Sniffs keystrokes
Steals private information from local Internet browsers
Installs itself for autorun at Windows startup
Checks the CPU name from registry, possibly for anti-virtualization
Creates a copy of itself
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanSpy:MSIL/Siplog.B?


File Info:
crc32: 3FDC8869md5: 1d029418a2e6ffe42d60821c683ac47cname: david.exesha1: 5d9dd42cb947abaf3512c5a0c4efe0bb987b69e2sha256: 538a207974969d50055870c016eb819c2a71a1388db863bf025ea5bc2144b00bsha512: 2ced281b7860ce9d77dea200113e19f7b3321d26940d02ee91e047ccb41bcebcef551f0d0129bc02a87a3cd646f68e9c14de5d2039894be9581734b0589d0734ssdeep: 24576:Qtb20pkaCqT5TBWgNQ7aqy+28KADSIxlhk4jG/R56A:ZVg5tQ7aqqBAOIfhk6Q5type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

TrojanSpy:MSIL/Siplog.B also known as:

MicroWorld-eScan	Trojan.GenericKD.33979429
McAfee	Trojan-AitInject.aq
Malwarebytes	Trojan.MalPack.AutoIt.Generic
BitDefender	Trojan.GenericKD.33979429
Cybereason	malicious.cb947a
TrendMicro	Trojan.Win32.VIGORF.USXVPF620
Cyren	W32/AutoIt.OM.gen!Eldorado
Symantec	AUT.Heuristic!gen5
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Script.Generic
Alibaba	TrojanDropper:Win32/Agentoit.1613e850
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.GenericKD.33979429
F-Secure	Heuristic.HEUR/AGEN.1100004
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
MaxSecure	Trojan.Malware.300983.susgen
FireEye	Generic.mg.1d029418a2e6ffe4
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Keylogger.AgentTesla
Avira	HEUR/AGEN.1100004
Fortinet	AutoIt/Injector.FIC!tr
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Script.Generic
Microsoft	TrojanSpy:MSIL/Siplog.B
MAX	malware (ai score=82)
TrendMicro-HouseCall	Trojan.Win32.VIGORF.USXVPF620
Rising	Trojan.Obfus/Autoit!1.C646 (CLASSIC)
eGambit	Unsafe.AI_Score_83%
GData	MSIL.Trojan.Injector.U6YIYW
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	win/malicious_confidence_70% (W)
Qihoo-360	Generic/Trojan.Script.ed4