Categories: PUA

NirSoft Chrome Cookies View (PUA) (file analysis)

The NirSoft Chrome Cookies View (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What NirSoft Chrome Cookies View (PUA) virus can do?

  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Hebrew
  • Authenticode signature is invalid
  • Steals private information from local Internet browsers
  • Harvests cookies for information gathering

How to determine NirSoft Chrome Cookies View (PUA)?


File Info:

name: CA251E608DF4540D65A7.mlwpath: /opt/CAPEv2/storage/binaries/d20d1df94b82c28a43cc3a7f3a652df2a3bc0cf744f14bdadf2cb667fa54a9f2crc32: FBA68E6Amd5: ca251e608df4540d65a71ce34ef973basha1: a9b8360e5aee2226604838c8826b823f310929e8sha256: d20d1df94b82c28a43cc3a7f3a652df2a3bc0cf744f14bdadf2cb667fa54a9f2sha512: 05edf5d76e3e10c90f8bdc9ade685204130d163f44f2c023a6ec883551a64912257d67abebac013277266ac5fd6d05a497a4f37d9d2b2de33f174b8bac3038fcssdeep: 196608:D2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2y2:D2y2y2y2y2y2y2y2y2y2y2y2y2y2y2yWtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16276BE22F3E28076D4B71571076B5B36AEFDBA2441328C5B47C81C4E5EB46A1EA3E317sha3_384: 10005d88ff15f2b0745231baef17f73bc079cbd07d245b3272735f1568c76bf17e1ed1f0cb229c368b039f905dfc5a38ep_bytes: 6a7068c0044400e80802000033ff57fftimestamp: 2020-02-19 09:25:12

Version Info:

CompanyName: NirSoftFileDescription: ChromeCookiesViewFileVersion: 1.60InternalName: ChromeCookiesViewLegalCopyright: Copyright © 2011 - 2020 Nir SoferOriginalFilename: ChromeCookiesView.exeProductName: ChromeCookiesViewProductVersion: 1.60Translation: 0x0409 0x04b0

NirSoft Chrome Cookies View (PUA) also known as:

Bkav W32.AIDetect.malware2
Lionic Trojan.Win32.Generic.4!c
MicroWorld-eScan Trojan.GenericKD.47566243
FireEye Generic.mg.ca251e608df4540d
McAfee GenericRXAA-AA!CA251E608DF4
Cylance Unsafe
Zillya Trojan.Nimnul.Win32.1861
K7AntiVirus Riskware ( 0040eff71 )
BitDefenderTheta Gen:NN.ZexaE.34062.@t3@aSijIoiO
Cyren W32/CookieStealer.G.gen!Eldorado
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win32:Malware-gen
Cynet Malicious (score: 100)
BitDefender Trojan.GenericKD.47566243
Ad-Aware Trojan.GenericKD.47566243
Emsisoft Trojan.GenericKD.47566243 (B)
DrWeb Tool.PassView.1944
McAfee-GW-Edition BehavesLike.Win32.BadFile.wh
Sophos NirSoft Chrome Cookies View (PUA)
GData Trojan.GenericKD.47566243
Jiangmin Trojan.Convagent.bo
Avira TR/AD.Mimikatz.ahqwa
Arcabit Trojan.Generic.D2D5CDA3
Microsoft PWS:Win32/Zbot!ml
ALYac Trojan.GenericKD.47523203
MAX malware (ai score=83)
Malwarebytes RiskWare.ChromeCookiesView
TrendMicro-HouseCall TROJ_GEN.R002H09L321
Rising HackTool.BrowserPassview!1.CC5C (CLASSIC)
Fortinet W32/PossibleThreat
AVG Win32:Malware-gen
MaxSecure Trojan.Malware.119770406.susgen

How to remove NirSoft Chrome Cookies View (PUA)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

21 hours ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

21 hours ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

21 hours ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

21 hours ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

21 hours ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

22 hours ago