Trojan

Should I remove “Trojan:Win32/Sabsik!mclg”?

Malware Removal

The Trojan:Win32/Sabsik!mclg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Sabsik!mclg virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Anomalous binary characteristics

How to determine Trojan:Win32/Sabsik!mclg?



File Info:

name: E06F42E8F1EF0D5CB5C2.mlw
path: /opt/CAPEv2/storage/binaries/9c98d2996b1b5f6c0359642966c9b9fda82057933a5272554ee23cd152351b2e
crc32: 6218C34D
md5: e06f42e8f1ef0d5cb5c29493d64710da
sha1: 6f46ba84ae390ad1f19176ffefd4917710ba3dcc
sha256: 9c98d2996b1b5f6c0359642966c9b9fda82057933a5272554ee23cd152351b2e
sha512: 7c57645812c49406aaf65f8db2bedeb69aaedf56ec9646c567ca2073b9b4dd35c492a274de4e37d9548e759cd8ff4edc96d1780cf0e422b96b24241a0d8624fc
ssdeep: 192:xqIsbh+mkbWyr9BPI2DBvpnG8CvjemHx:4h+myr91hDBv5GemH
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1A5F1C609BBEC8545F5FF4F3968F267211672FB472962D71E2C88005D2C726918AE2FB1
sha3_384: 57b11da40f47073958ce4960cabf2f89ddbe22cacfa02e8c216e721eb4fd30bd1e1ba3f636ac1a38f1f689338def17de
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-09-25 14:38:22


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: xmr-uninstaller.exe
LegalCopyright:  
OriginalFilename: xmr-uninstaller.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:Win32/Sabsik!mclg also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.12047
FireEyeGeneric.mg.e06f42e8f1ef0d5c
CAT-QuickHealTrojanpws.Msil
ALYacIL:Trojan.MSILZilla.12047
MalwarebytesMalware.AI.3588302750
SangforInfostealer.MSIL.Fareit.gen
K7AntiVirusTrojan ( 0057fc381 )
AlibabaTrojanPSW:MSIL/Fareit.c5221d33
K7GWTrojan ( 0057fc381 )
CyrenW64/MSIL_Troj.BCG.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Agent.UQS
Paloaltogeneric.ml
ClamAVWin.Packed.Bulz-9883710-0
KasperskyHEUR:Trojan-PSW.MSIL.Fareit.gen
BitDefenderIL:Trojan.MSILZilla.12047
AvastWin64:PWSX-gen [Trj]
TencentTrojan.Win64.BitCoinMiner.16000099
Ad-AwareIL:Trojan.MSILZilla.12047
SophosMal/Generic-S
DrWebTrojan.Siggen15.29118
TrendMicroTROJ_GEN.R002C0GJA21
McAfee-GW-EditionArtemis!Trojan
EmsisoftIL:Trojan.MSILZilla.12047 (B)
SentinelOneStatic AI – Malicious PE
GDataIL:Trojan.MSILZilla.12047
AviraHEUR/AGEN.1143065
MAXmalware (ai score=82)
KingsoftWin32.PSWTroj.Undef.(kcloud)
GridinsoftRansom.Win64.Sabsik.sa
ArcabitIL:Trojan.MSILZilla.D2F0F
MicrosoftTrojan:Win32/Sabsik!mclg
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4623435
McAfeeArtemis!E06F42E8F1EF
VBA32TrojanPSW.MSIL.Fareit
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002C0GJA21
RisingTrojan.Generic/MSIL@AI.100 (RDM.MSIL:busV2jvA7lhOBdAANll6FQ)
IkarusTrojan.MSIL.Agent
MaxSecureTrojan.Malware.73688875.susgen
FortinetMSIL/Agent.UQS!tr
AVGWin64:PWSX-gen [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/Sabsik!mclg?

Trojan:Win32/Sabsik!mclg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment