Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Feb 07, 2011 | Updated Sep 15, 2017

Trojan:DOS/Sinowal.A

Detected by Microsoft Defender Antivirus

Aliases: StealthMBR!mbr (McAfee) TROJ_MEBROOT.AI (Trend Micro) Backdoor.Win32.Sinowal.kmy (Kaspersky) Troj/Mbroot-A (Sophos) Trojan.Mebroot (Symantec)

Summary

Windows Defender Antivirus detects and removes this threat.
 
This threat is a member of the Win32/Sinowal family of password-stealing and backdoor trojans. It can install a security certificate to make you think a website is secure when it isn't. 
 
It can also steal your personal information, such as your banking user names and passwords, and send them to a hacker. 
 
This trojan is installed on your PC by VirTool:WinNT/Sinowal

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

You can also visit the Microsoft virus and malware community for more help.

This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:

You should change your passwords after you've removed this threat:

Follow us