Malware

PSWTool.Win32.NetPass.wrq removal

Malware Removal

The PSWTool.Win32.NetPass.wrq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What PSWTool.Win32.NetPass.wrq virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Hebrew
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine PSWTool.Win32.NetPass.wrq?



File Info:

name: 7FA5203A535EE2D5AAFB.mlw
path: /opt/CAPEv2/storage/binaries/0b413713300e6578507831be37ba7a9d0c88efe99c84b962bfb310a53e55af5b
crc32: 42951748
md5: 7fa5203a535ee2d5aafb6a4c27121601
sha1: 8d6455192b896a30fc2035d7f81bec7a7e68346a
sha256: 0b413713300e6578507831be37ba7a9d0c88efe99c84b962bfb310a53e55af5b
sha512: b45298c37506676c80faf72513838b17ded929f2e994bb53f9cb9e7f3028631d0376f5b44c9deb3f1c580879861bdaa45a67dab5d9d1f74736b6eff602d2914e
ssdeep: 6144:AeWmFUtGElcYecyozbmpXn3zeawOKSqZAtmkih:9MGE9t6Xn3ZAjk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F274BF13B3E28037E4B70170076B5B32EEFE7A202675895757E41C49AE706D1AB3A70B
sha3_384: f4d16fa74f1b95f9cb6f3b1b07ef311abc70082d70f5205b4a8a57982c5dcf36505018414032841266c28c8df264fe24
ep_bytes: 6a706870144400e80402000033ff57ff
timestamp: 2013-02-27 15:48:24


Version Info:

CompanyName: nirSoft
FileDescription: WebBrowserPassView
FileVersion: 1.3
InternalName: WebBrowserPassView
LegalCopyright: Copyright © 2011 - 2013 nir Sofer
OriginalFilename: 
ProductName: WebBrowserPassVieW
productVersion: 1.37
Translation: 0x0409 0x04b0

PSWTool.Win32.NetPass.wrq also known as:

BkavW32.AIDetectMalware
LionicRiskware.Win32.NetPass.1!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Application.Heur.uq1@kOJBIccO
FireEyeGeneric.mg.7fa5203a535ee2d5
CAT-QuickHealHackTool.BroPasView.W4
SkyhighBehavesLike.Win32.PUP.fh
Cylanceunsafe
ZillyaTool.NetPass.Win32.2640
SangforHacktool.Win32.Browserpassview.Vpxb
Cybereasonmalicious.92b896
SymantecPasswordRevealer
ESET-NOD32a variant of Win32/PSWTool.WebBrowserPassView.B potentially unsafe
ClamAVWin.Trojan.NirsoftStealer-9905975-1
Kasperskynot-a-virus:PSWTool.Win32.NetPass.wrq
BitDefenderGen:Application.Heur.uq1@kOJBIccO
NANO-AntivirusRiskware.Win32.PassView.eteval
AvastFileRepMetagen [Trj]
EmsisoftGen:Application.Heur.uq1@kOJBIccO (B)
DrWebTool.PassView.754
VIPREGen:Application.Heur.uq1@kOJBIccO
TrendMicroTROJ_GEN.R002C0OED23
SophosNirPassView (PUA)
IkarusHackTool.Win32.Passview
GDataWin32.Riskware.WebBrowserPassView.A
JiangminPSWTool.NetPass.a
WebrootW32.Malware.Ml.Vt
VaristW32/PasswView.QNRU-5410
Antiy-AVLTrojan/Win32.Tgenic
ArcabitApplication.Heur.EC108D
ZoneAlarmnot-a-virus:PSWTool.Win32.NetPass.wrq
MicrosoftHackTool:Win32/BrowserPassview
CynetMalicious (score: 100)
AhnLab-V3HackTool/Win32.BrowserPassview.C1327269
McAfeeGenericRXAA-AA!7FA5203A535E
MAXmalware (ai score=73)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0OED23
RisingHackTool.BrowserPassview!8.B83 (TFE:5:ZWA4pf7e2oC)
YandexRiskware.PSWTool!aqYewLZhvgM
MaxSecureTrojan.Malware.5486730.susgen
FortinetRiskware/WebBrowserPassView
AVGFileRepMetagen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_100% (W)

How to remove PSWTool.Win32.NetPass.wrq?

PSWTool.Win32.NetPass.wrq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment