Trojan:Win32/Sirefef.AB malicious file

The Trojan:Win32/Sirefef.AB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Sirefef.AB virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Sirefef.AB?

File Info:
name: 6E43BCF0679E0127FB96.mlw
path: /opt/CAPEv2/storage/binaries/23a07134a03a52388775a1d945a5e1e809de759ceda1e5fd583432bec3a24439
crc32: 7CF36825
md5: 6e43bcf0679e0127fb962efebc6b7669
sha1: a1cd6baaab0d4206568828ae72ac5b9ea2d0ca42
sha256: 23a07134a03a52388775a1d945a5e1e809de759ceda1e5fd583432bec3a24439
sha512: 55c0ab7d4d59c8071d01d2d3655548157b360f09230561f16226b636cddc28837050de3e3c6fd4363a37b5aa38df18fe0da0822255473c0af4dd5895b1e77966
ssdeep: 1536:KIgTlxN/6wclrvtFZNyPjYK/HfQ+WUN+T4ksaKKS0Gfr4QWCb3Xp2:KIuc/ttXNIxHfyHKf0cE7e3X4
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1B2B30253F7CC3302F6EB71FE5076791A513565138BB2C3D396C405AA5A4A8E8CDF82A0
sha3_384: 01d8970c6f155ebe9a5868162fe315dff38583481ff5e803c23b9e5a1455f380da9adc24d710734ab3ac5bb50451e785
ep_bytes: 518b0dc0a502102bce2bc740010d3830
timestamp: 2011-12-05 11:06:57

Version Info:
CompanyName: system©©s
FileDescription: VueSoftWare
FileVersion: 2.R77.30221T RC10.1341 alpha
InternalName: tgquqwz
OriginalFilename: tgquqwz.exe
LegalCopyright: system©©s Corp All Rights reserved
ProductName: VueSoftWare
ProductVersion: 4.214.33745
Translation: 0x0409 0x04b0

Trojan:Win32/Sirefef.AB also known as:

How to remove Trojan:Win32/Sirefef.AB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.