Malware

How to remove “MSIL/PSWTool.BrowserPass.J potentially unsafe”?

Malware Removal

The MSIL/PSWTool.BrowserPass.J potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/PSWTool.BrowserPass.J potentially unsafe virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine MSIL/PSWTool.BrowserPass.J potentially unsafe?


File Info:

name: FDE88A91DEC5B5288D37.mlw
path: /opt/CAPEv2/storage/binaries/c5ddb771bbf82a1b6e8fea74d1ef8b4572d45eef607a393bc7e52b0df076cdf9
crc32: 20CF7B55
md5: fde88a91dec5b5288d37f3ecf262c910
sha1: 4ef881808a937694599366eff7f133a2d234635a
sha256: c5ddb771bbf82a1b6e8fea74d1ef8b4572d45eef607a393bc7e52b0df076cdf9
sha512: d46312113934c2d9133665094dc5e0574164e358035e7ca6588067c0b313c6d845f6cba2a53e56bda780c165f0c2ddadca2dcfa671528b51d86145962072c2c6
ssdeep: 12288:cTyvN9HxRyMTfpjozQ/vXBaaYehcHy7s:LyMThjozQnAh7Hy4
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AEB44BBB27D9A965F1FE8730D4A16D9E82B5F06ED677FF8A4480C4F41892390E844723
sha3_384: 29bb37f825cd2fc33e1c184cf7ad4ddecfc5b4a247e930e90cb05d4866ae4b4e70b2000eb02491c4161cc342f20ea571
ep_bytes: ff250020400001010300050006000100
timestamp: 2022-10-19 03:42:21

Version Info:

Translation: 0x0000 0x04b0
Comments: bGhost is a Chrome, Firefox and Edge data harvestor.
CompanyName:
FileDescription: bGhost
FileVersion: 1.0.0.0
InternalName: BrowserGhost.exe
LegalCopyright:
LegalTrademarks:
OriginalFilename: BrowserGhost.exe
ProductName:
ProductVersion: 1.0.0.0
Assembly Version: 3.6.17.1

MSIL/PSWTool.BrowserPass.J potentially unsafe also known as:

BkavW32.AIDetectNet.01
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
CAT-QuickHealTrojan.MsilFC.S20327363
McAfeeGenericRXNF-RK!FDE88A91DEC5
Cybereasonmalicious.1dec5b
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/PSWTool.BrowserPass.J potentially unsafe
F-SecureHeuristic.HEUR/AGEN.1236099
McAfee-GW-EditionGenericRXNF-RK!FDE88A91DEC5
IkarusTrojan-Spy.LunaStealer
AviraHEUR/AGEN.1236099
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
GoogleDetected
MaxSecureTrojan.Malware.300983.susgen

How to remove MSIL/PSWTool.BrowserPass.J potentially unsafe?

MSIL/PSWTool.BrowserPass.J potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment