Malware

MSIL/PSWTool.BrowserPass.F potentially unsafe removal

Malware Removal

The MSIL/PSWTool.BrowserPass.F potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/PSWTool.BrowserPass.F potentially unsafe virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the embedded pe malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine MSIL/PSWTool.BrowserPass.F potentially unsafe?


File Info:

name: EF2F6CEBDA2BC246A5A7.mlw
path: /opt/CAPEv2/storage/binaries/282ae076a8acf28f603170f4fadb5cd91b6554f3a7f85d51337c867bffcaa08a
crc32: F3406269
md5: ef2f6cebda2bc246a5a7b1f075202a12
sha1: d9e0333870206ccc3df48286dc68bf5a35629071
sha256: 282ae076a8acf28f603170f4fadb5cd91b6554f3a7f85d51337c867bffcaa08a
sha512: 82c17b7761bb969e80a8fd998208e145e230c2c374cd939dc23a7599b13a46875160d97c74d6ac132f5f20b469981ffcf1a55847d14cdf240a9a19d3ba6547e3
ssdeep: 6144:YkzLzZZx2cG5yMA0c/FNfIQ6NDn9s72DjTqyllHYAB5V46T9NAzya38tZgxUq/6g:YkzLzZZx+yMA1gnqWH1RtAzya384qq/X
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E6B44BBB27D4B926F2EE9730D9906C8E42B4F05A9672FF8B148094B429977D0FC41367
sha3_384: 2592b196f570d0c33da410a017774fbd6ce3c39ed6f4bc8883c01ddbad88ec3c32268732b6d8f0649fa90642dc74852f
ep_bytes: ff250020400001010300050006000100
timestamp: 2020-06-12 11:59:44

Version Info:

Translation: 0x0000 0x04b0
Comments: BrowserGhost is a Chrome, Firefox and Edge data harvestor.
CompanyName:
FileDescription: BrowserGhost
FileVersion: 1.0.0.0
InternalName: BrowserGhost.exe
LegalCopyright:
LegalTrademarks:
OriginalFilename: BrowserGhost.exe
ProductName:
ProductVersion: 1.0.0.0
Assembly Version: 3.6.17.1

MSIL/PSWTool.BrowserPass.F potentially unsafe also known as:

BkavW32.Common.00EAA989
LionicRiskware.Win32.PSWTool.1!c
AVGWin32:Malware-gen
DrWebTool.PassView.1968
CAT-QuickHealTrojan.MsilFC.S20327363
SkyhighGenericRXNF-RK!EF2F6CEBDA2B
McAfeeGenericRXNF-RK!EF2F6CEBDA2B
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Agensla.Win32.3121
K7GWUnwanted-Program ( 0057cc3f1 )
K7AntiVirusUnwanted-Program ( 0057cc3f1 )
VirITTrojan.Win32.Genus.VDP
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/PSWTool.BrowserPass.F potentially unsafe
AvastWin32:Malware-gen
Kasperskynot-a-virus:HEUR:PSWTool.MSIL.BroPass.gen
NANO-AntivirusRiskware.Win32.PassView.jqrhly
RisingMalware.Strealer!8.1EF (CLOUD)
TrendMicroTROJ_GEN.R002C0DA924
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.PSW.MSIL.aibl
WebrootW32.Adware.Gen
VaristW32/MSIL_Agent.CPK.gen!Eldorado
Antiy-AVLTrojan[PSW]/MSIL.Agensla
MicrosoftTrojan:Win32/Vindor!pz
ZoneAlarmnot-a-virus:HEUR:PSWTool.MSIL.BroPass.gen
GDataMSIL.Riskware.BrowserGhost.B
GoogleDetected
AhnLab-V3Malware/Win32.RL_Generic.C4218318
VBA32TScope.Trojan.MSIL
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DA924
TencentMalware.Win32.Gencirc.115d4946
YandexRiskware.PSWTool!OZTVgw6nB8M
IkarusTrojan.MSIL.PSW
MaxSecureTrojan.Malware.104050279.susgen
FortinetRiskware/BrowserPass
DeepInstinctMALICIOUS
alibabacloudTrojan:MSIL/Pswtool.BrowserPass

How to remove MSIL/PSWTool.BrowserPass.F potentially unsafe?

MSIL/PSWTool.BrowserPass.F potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment