Skip to main content
Skip to main content
Microsoft Security Intelligence
185 entries found. Displaying page 1 of 10.
Updated on May 17, 2010
PWS:Win32/Sinowal.gen!D is a component of the greater Win32/Sinowal family.
Alert level: severe
Updated on Sep 21, 2014
Windows Defender Antivirus detects and removes this threat.
 
This family of password-stealing and backdoor trojans can steal your sensitive informations, such as your user names and passwords for banking websites. 
 
Alert level: high
Updated on Sep 21, 2014
Windows Defender Antivirus detects and removes this threat.
 
This threat can be used by other malware that steal your sensitive information, including your banking user names and passwords.
 
See the Win32/Sinowal family description for more information.
Alert level: high
Updated on Sep 21, 2014
Windows Defender Antivirus detects and removes this threat.
 
This threat can steal your sensitive information, including your banking user names and passwords.
 
See the Win32/Sinowal family description for more information.
Alert level: severe
Updated on May 13, 2014

Windows Defender detects and removes this threat.

See the Win32/Sinowal family description for more information.

Alert level: severe
Updated on Aug 02, 2011

PWS:Win32/Sinowal.gen!Y is a trojan that steals information about the affected computer. It sends the collected information to a remote server.

Alert level: severe
Updated on Sep 26, 2013
PWS:Win32/Sinowal.AR is a trojan that is specifically used to capture personal information, such as user names and passwords, and then send that information to a remote attacker.
Alert level: severe
Updated on Jul 27, 2014
Windows Defender Antivirus detects and removes this threat.
 
This threat can steal your personal information, such as your user names and passwords. It sends the stolen information to a malicious hacker. 
 
Alert level: severe
Updated on Apr 11, 2011
PWS:Win32/Sinowal.H is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans.
Alert level: severe
Updated on Sep 06, 2012

PWS:Win64/Sinowal.gen!B is a component of the Win32/Sinowal family.

Win32/Sinowal is a family of password-stealing and backdoor trojans. These trojans may to steal sensitive information by disrupting SEcure Socket Layer (SSL) transactions (those that use certificates) from your computer. Some Sinowal components may also be able to hide or disguise themselves to avoid detection, and perform operations pretending to be trusted processes, such as "explorer.exe", to bypass your computer's security defences.

Alert level: severe
Updated on May 17, 2010
PWS:Win32/Sinowal.gen!M is the generic detection for a member of the Win32/Sinowal family. It drops other malware and steals online banking and FTP credentials.
Alert level: severe
Updated on Mar 14, 2012

Trojan:DOS/Sinowal.Q is the detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal.

Alert level: severe
Updated on Apr 11, 2011
Trojan:DOS/Sinowal.M is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans. The trojan may try to find a cryptographic certificate on the infected computer and install a certificate on the computer to mislead users in Secure Sockets Layer (SSL) Web transactions. The trojan may also capture user data such as banking credentials from various user accounts and send the data to Web sites specified by the attacker. Some Win32/Sinowal components may also open a backdoor on a TCP port. Win32/Sinowal may try to perform certain operations from the context of a trusted process such as explorer.exe in order to bypass local software-based firewalls.
 
Trojan:DOS/Sinowal.M is a detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal. It loads the driver loader code of Sinowal when the affected computer boots.
Alert level: severe
Updated on Dec 22, 2013
Windows Defender Antivirus detects and removes this threat.
 
This threat is a member of the Win32/Sinowal family of password-stealing and backdoor trojans. It can install a security certificate to make you think a website is secure when it isn't. 
 
It can also steal your personal information, such as your banking user names and passwords, and send them to a hacker. 
 
This trojan is installed on your PC by VirTool:WinNT/Sinowal
Alert level: severe
Updated on May 11, 2011
PWS:Win32/Sinowal is a multi-component trojan that communicates with remote servers to send sensitive information such as information about the affected computer and other credentials.
Alert level: high
Updated on Apr 11, 2011
TrojanDownloader:Win32/Sinowal.A is the downloader component of the Win32/Sinowal family. It is used to download updates to the infected computer.
Alert level: severe
Updated on Apr 11, 2011
Trojan:DOS/Sinowal.B is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans. The trojan may try to find a cryptographic certificate on the infected computer and install a certificate on the computer to mislead users in Secure Sockets Layer (SSL) web transactions. The trojan may also capture user data such as banking credentials from various user accounts and send the data to websites specified by the attacker.
 
Trojan:DOS/Sinowal.B is a detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal. It loads the driver loader code of Sinowal when the affected computer boots.
Alert level: severe
Updated on Apr 11, 2011
Trojan:DOS/Sinowal.C is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans. The trojan may try to find a cryptographic certificate on the infected computer and install a certificate on the computer to mislead users in Secure Sockets Layer (SSL) web transactions. The trojan may also capture user data such as banking credentials from various user accounts and send the data to websites specified by the attacker.
 
Trojan:DOS/Sinowal.C is a detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal. It loads the driver loader code of Sinowal when the affected computer boots.
Alert level: severe
Updated on Apr 11, 2011
Trojan:DOS/Sinowal.D is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans. The trojan may try to find a cryptographic certificate on the infected computer and install a certificate on the computer to mislead users in Secure Sockets Layer (SSL) web transactions. The trojan may also capture user data such as banking credentials from various user accounts and send the data to websites specified by the attacker.
 
Trojan:DOS/Sinowal.D is a detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal. It loads the driver loader code of Sinowal when the affected computer boots.
Alert level: severe
Updated on Apr 11, 2011
Trojan:DOS/Sinowal.E is a component of Win32/Sinowal - a family of password-stealing and backdoor trojans. The trojan may try to find a cryptographic certificate on the infected computer and install a certificate on the computer to mislead users in Secure Sockets Layer (SSL) web transactions. The trojan may also capture user data such as banking credentials from various user accounts and send the data to websites specified by the attacker.
 
Trojan:DOS/Sinowal.E is a detection for a malformed MBR (Master Boot Record) generated by VirTool:WinNT/Sinowal. It loads the driver loader code of Sinowal when the affected computer boots.
Alert level: severe