How to remove “W32/Sivis-E”?

The W32/Sivis-E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What W32/Sivis-E virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine W32/Sivis-E?


File Info:
name: 16F216DF55FEDE6D4482.mlw
path: /opt/CAPEv2/storage/binaries/2decd083e6164c1280832f3022f9a43418dea10a3251afc0e9efa422b3e2e0be
crc32: 4F11E0CB
md5: 16f216df55fede6d4482df8d20d190eb
sha1: ab19e25be1599a39970387442a96c889b8674687
sha256: 2decd083e6164c1280832f3022f9a43418dea10a3251afc0e9efa422b3e2e0be
sha512: 261184da9af843f0f668f658ca0eafb8f38a98e3a5fa0a536a0c5ce70669108cf301f1d276836fe92f43bdcf65b0aefc89cf810e9e7053d463e154b5c4e85807
ssdeep: 6144:ZZlX9E8qNmft7iTnuXFZlX9E8CNmft7iTe:ZRvzXFRvZ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A1345B8AF9CAC7A2C66641340D1FB165D274E20B5E10958B738CA34D2FF1BA463F5BC6
sha3_384: bb5131c183706f7d527b9d0193f81e99992ef20a267a42027d4008adb72301082ebeeefa445f855b87a5ee36bd7d194a
ep_bytes: 
timestamp: 2007-10-24 03:41:52

Version Info:
0: [No Data]

W32/Sivis-E also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Graftor.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.66128
ClamAV	Win.Trojan.Agent-6943819-1
Skyhigh	GenericRXGM-TV!16F216DF55FE
McAfee	GenericRXGM-TV!16F216DF55FE
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Ausiv.069709ce
Arcabit	Trojan.Generic.D10250
Symantec	Trojan.Gen.2
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKDZ.66128
Avast	Win32:Agent-BCFZ [Trj]
Emsisoft	Trojan.GenericKDZ.66128 (B)
DrWeb	Win32.Siggen.28
VIPRE	Trojan.GenericKDZ.66128
Sophos	W32/Sivis-E
Ikarus	Trojan.Win32.Ausiv
Google	Detected
Antiy-AVL	Trojan/Win32.Ausiv.a
Kingsoft	malware.kb.a.978
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	Trojan:Win32/Ausiv
GData	Trojan.GenericKDZ.66128
Varist	W32/S-816781e1!Eldorado
AhnLab-V3	Trojan/Win32.Agent.C3574824
VBA32	BScope.Trojan.Cosmu
Malwarebytes	Generic.Malware.AI.DDS
Rising	Virus.Sivis!1.A647 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.0C42!tr
AVG	Win32:Agent-BCFZ [Trj]
DeepInstinct	MALICIOUS

How to remove W32/Sivis-E?

W32/Sivis-E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X