Malware

PSWTool.Win32.Agent.ag removal instruction

Malware Removal

The PSWTool.Win32.Agent.ag is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PSWTool.Win32.Agent.ag virus can do?

  • Loads a driver
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine PSWTool.Win32.Agent.ag?


File Info:

crc32: 4F0EF624
md5: 04c5c54b0974ae505211ebfdef8a37a4
name: 04C5C54B0974AE505211EBFDEF8A37A4.mlw
sha1: 271426a44d4e1d4ffce8c50dbebe51a54d873dbd
sha256: b906c3770a1abd7fa7ae0714ad3726205b5ac30c3125f8fa693af49dbf8d3018
sha512: c217607d90fc4abe227a6554225d8085b3f135ebe54d4e91f199e5a81c0fdd2f83adc26a3423a515740597e2dfdcbb0baa8e75a79a482078ec79d996fd45e88e
ssdeep: 3072:2MlWZDmwjeJtNXrxOpquXrgX5Jd0nXe6n+gWWWbuIp8:2Cq6wwZrxOpqa2J0nXeY+TWWbl8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2005-2010 Oleg N. Scherbakov
InternalName: 7ZSfxMod
FileVersion: 1.4.0.1934
CompanyName: Oleg N. Scherbakov
PrivateBuild: 2010-11-13
ProductName: 7-Zip SFX
ProductVersion: 1.4.0.1934
FileDescription: 7z Setup SFX (x86)
OriginalFilename: 7ZSfxMod_x86.exe
Translation: 0x0000 0x04b0

PSWTool.Win32.Agent.ag also known as:

K7AntiVirusUnwanted-Program ( 004d38111 )
DrWebTool.PassSteel.916
CynetMalicious (score: 85)
CAT-QuickHealTrojan.Bumat
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaRiskWare:Win32/Generic.a8d79f35
K7GWUnwanted-Program ( 004d38111 )
TrendMicroTROJ_SPNR.02GB13
CyrenW32/Backdoor.BLSX-2613
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Trojan-gen
GDataWin32.Trojan.Agent.YOKCH0
Kasperskynot-a-virus:PSWTool.Win32.Agent.ag
NANO-AntivirusRiskware.Win32.Agent.imiwg
SophosMal/Generic-S
ComodoSuspicious@#3jb1kpirbsfwn
F-SecurePrivacyRisk.SPR/Tool.CMOSPw
VIPRETrojan.Win32.Generic!BT
F-ProtW32/Backdoor2.DQOJ
WebrootW32.Trojan.Gen
AviraCMOSPWD.EXE
Antiy-AVLRiskWare[PSWTool]/Win32.Agent
MicrosoftTrojan:Win32/Bumat!rfn
JiangminPSWTool.Agent.ce
ZoneAlarmnot-a-virus:PSWTool.Win32.Agent.ag
McAfeeArtemis!04C5C54B0974
PandaGeneric Malware
TrendMicro-HouseCallTROJ_SPNR.02GB13
RisingTrojan.Bumat!8.710 (CLOUD)
YandexRiskware.PSWTool!
IkarusTrojan.Win32.Bumat
eGambitnot-a-virus:Generic.PSW
FortinetRiskware/Agent.AG!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove PSWTool.Win32.Agent.ag?

PSWTool.Win32.Agent.ag removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment