Malware

Win32:Downloader-TBF [Trj] removal guide

Malware Removal

The Win32:Downloader-TBF [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:Downloader-TBF [Trj] virus can do?

  • Authenticode signature is invalid

How to determine Win32:Downloader-TBF [Trj]?


File Info:

name: 157B396AC981D53ECC37.mlw
path: /opt/CAPEv2/storage/binaries/865e01e48e0b0f7fc08011299b49f8ff29c76eea959353cce7e0050f933d54b4
crc32: 8CFE6ED6
md5: 157b396ac981d53ecc37dba0d18b6b12
sha1: 134e39241c1e60d39779cce7343359502382814c
sha256: 865e01e48e0b0f7fc08011299b49f8ff29c76eea959353cce7e0050f933d54b4
sha512: cd220293bc32342970b4b3e993e2aa84adc4dea6b24042d6260722c3a08ebc14c90e7f2e65b3e82854e56a9bc19135b75a3ac3e9b6366d8555718ed6724649a4
ssdeep: 48:C+Ubwu9hrN5c8/Yc4cA/c4UBPmIg7o2cFPv:uhrNvQYA/4wIg7Yv
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T125814F3BA7647A33D0442B7318A745C77EB9676013A1461B84832A1A240153BDE7EF87
sha3_384: 8aa746b425a903c7388c1fe949422c9d3be143cdcd98dd0196f9a502842ed716f039f42e1b190f5c6f61bc8fdfa1fd83
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2013-03-15 18:12:29

Version Info:

0: [No Data]

Win32:Downloader-TBF [Trj] also known as:

BkavW32.FamVT.DebrisB.Worm
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.30878484
FireEyeGeneric.mg.157b396ac981d53e
CAT-QuickHealTrojan.Agent.WL
SkyhighBehavesLike.Win32.Downloader.xz
McAfeeDownloader-FKP!157B396AC981
MalwarebytesBundpil.Worm.AutoRun.DDS
ZillyaWorm.DebrisGen.Win32.23
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 004d2f401 )
K7AntiVirusEmailWorm ( 0040f50c1 )
BitDefenderThetaGen:NN.ZedlaF.36802.aq4@a4uKeIf
VirITWorm.Win32.Generic.FXY
SymantecBackdoor.Trojan
ESET-NOD32Win32/Bundpil.J
APEXMalicious
TrendMicro-HouseCallWORM_GAMARUE.SMB
ClamAVWin.Worm.Bundpil-3
KasperskyWorm.Win32.Debris.b
BitDefenderTrojan.GenericKD.30878484
NANO-AntivirusTrojan.Win32.Bundpil.jvbysv
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastWin32:Downloader-TBF [Trj]
TencentTrojan.Win32.Csyr.A
TACHYONWorm/W32.Bundpil.4096
EmsisoftTrojan.GenericKD.30878484 (B)
BaiduWin32.Worm.Bundpil.z
F-SecureTrojan.TR/Rogue.kdz.409654
DrWebTrojan.MulDrop4.25343
VIPRETrojan.GenericKD.30878484
TrendMicroWORM_GAMARUE.SMB
Trapminemalicious.moderate.ml.score
SophosTroj/Loader-M
IkarusTrojan.SuspectCRC
JiangminWorm/Bundpil.b
WebrootW32.Worm.Gen
VaristW32/Csyr.A!Eldorado
AviraTR/Rogue.kdz.409654
Antiy-AVLWorm/Win32.Bundpil
Kingsoftmalware.kb.a.985
MicrosoftWorm:Win32/Gamarue.N
XcitiumWorm.Win32.Bundpil.T@4wizl6
ArcabitTrojan.Generic.D1D72B14
ViRobotWorm.Win32.Bundpil.4096
ZoneAlarmWorm.Win32.Debris.b
GDataWin32.Worm.Debris.A
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Bundpil.R63957
Acronissuspicious
VBA32BScope.Worm.Debris
MAXmalware (ai score=81)
Cylanceunsafe
PandaGeneric Malware
RisingWorm.Gamarue!1.68D7 (CLASSIC)
YandexTrojan.GenAsa!uEcSV6bgqXU
SentinelOneStatic AI – Malicious PE
MaxSecureWorm.W32.Bundpil.abr
FortinetW32/Bundpil.K!tr
AVGWin32:Downloader-TBF [Trj]
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Gamarue.78f09fa7

How to remove Win32:Downloader-TBF [Trj]?

Win32:Downloader-TBF [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment