About “HackTool:Win32/Mailpassview.A!MTB” infection

The HackTool:Win32/Mailpassview.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/Mailpassview.A!MTB virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine HackTool:Win32/Mailpassview.A!MTB?


File Info:
name: 2626B490659FC79EFF20.mlw
path: /opt/CAPEv2/storage/binaries/f9494e9fc9bbf292a3bfc33274801963147d163552adfe0d46ff05907f772985
crc32: A154B253
md5: 2626b490659fc79eff208bfe83ce5a52
sha1: 6264a6a44fc07f0ec94703f54703587eb3fb6147
sha256: f9494e9fc9bbf292a3bfc33274801963147d163552adfe0d46ff05907f772985
sha512: ff28bfac80d121da02280af662f559834bee635dbe65dfbf84d0ea853b12b7f4e51142ac4e9e8ffc77dddf30f01ad0f1102af1a677a5e158579fc7a79292cdec
ssdeep: 3072:Kd/vyWmJe45rKIxPqnjA5V2HJyESh7l3RPmrlI0OfE8NCq:KXpEzxPqj1HJyEOqafEk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T136E3F28769D4D4A6F242493054E7C77FABF2B7816650809B2B25DFDEBC60303AE1528F
sha3_384: fb17adf4df6033a11b6b98bf1cab63bab98aec7269375d68b17955f8c700552db72c28a7b2163a555126b72a6b4ccacb
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2008-05-03 14:08:42

Version Info:
0: [No Data]

HackTool:Win32/Mailpassview.A!MTB also known as:

Lionic	Riskware.Win32.MailPassView.1!c
FireEye	Trojan.GenericKD.36312861
CAT-QuickHeal	HackTool.Mailpassview
McAfee	Artemis!2626B490659F
Zillya	Tool.MailPassView.Win32.839
K7AntiVirus	Unwanted-Program ( 004b8eed1 )
K7GW	Unwanted-Program ( 004b8eed1 )
Cybereason	malicious.0659fc
Symantec	PasswordRevealer
ESET-NOD32	a variant of Win32/PSWTool.MailPassView.E potentially unsafe
ClamAV	Win.Tool.Mailpassview-82
Kaspersky	not-a-virus:PSWTool.Win32.MailPassView.wdm
BitDefender	Trojan.GenericKD.36312861
MicroWorld-eScan	Trojan.GenericKD.36312861
Avast	Win32:GenMaliciousA-HRF [PUP]
Tencent	Win32.Trojan.Mailpassview.Hoyg
Ad-Aware	Trojan.GenericKD.36312861
Emsisoft	Trojan.GenericKD.36312861 (B)
Comodo	ApplicUnsaf@#enrz60m8kkgj
TrendMicro	HKTL_PASSVIEW
McAfee-GW-Edition	HTool-PassView
Sophos	Generic Reputation PUA (PUA)
GData	Trojan.GenericKD.36312861
Jiangmin	PSWTool.MailPassView.di
MAX	malware (ai score=83)
Antiy-AVL	RiskWare[PSWTool]/Win32.MailPassView
Gridinsoft	Ransom.Win32.Gen.sa
ViRobot	Trojan.Win32.Z.Mailpassview.147974
Microsoft	HackTool:Win32/Mailpassview.A!MTB
ALYac	Trojan.GenericKD.36312861
Malwarebytes	Malware.AI.4113888394
TrendMicro-HouseCall	HKTL_PASSVIEW
Rising	Trojan.Generic@ML.98 (RDML:lX6KONNjZJECqXA0DrdzQA)
Yandex	Trojan.Igent.bT8x4M.26
Fortinet	Riskware/MailPassView
AVG	Win32:GenMaliciousA-HRF [PUP]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (D)

How to remove HackTool:Win32/Mailpassview.A!MTB?

HackTool:Win32/Mailpassview.A!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X