Categories: PUA

PUP.Optional.PasswordTool removal guide

The PUP.Optional.PasswordTool is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.PasswordTool virus can do?

  • Unconventionial language used in binary resources: Hebrew
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine PUP.Optional.PasswordTool?


File Info:

crc32: 454C6E3Dmd5: f3ca95a762a4101a2cd5789190681a78name: F3CA95A762A4101A2CD5789190681A78.mlwsha1: cac61068382b93ee63dc06324e501ddc71ac65efsha256: 460fc0ae9b29b61d7a147b599eb02b70ea6a830df0f5cd16a317a95e466513c0sha512: d33d62c0f5b65bbfd55c6a4281bff60980f3e335c3a4ff802dd8ac92cc417785f3a3d82607dbfd542222ce40ff1a45c8c3c9ac46e3543cd4f5af94527dace2b5ssdeep: 768:ZaasL8BOrd2XEBBi/fiuUu9Zd25S941h05C:Za/82d20B+tB9G+5type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 2006 - 2007 Nir SoferInternalName: Remote Desktop PassViewFileVersion: 1.01CompanyName: NirSoftPrivateBuild: LegalTrademarks: Comments: ProductName: Remote Desktop PassViewSpecialBuild: ProductVersion: 1.01FileDescription: Remote Desktop Password RecoveryOriginalFilename: rdpv.exeTranslation: 0x0409 0x04b0

PUP.Optional.PasswordTool also known as:

MicroWorld-eScan Application.GenericKD.3863045
CMC Generic.Win32.f3ca95a762!MD
CAT-QuickHeal Hacktool.Passview
Cylance Unsafe
Zillya Tool.IEPassView.Win32.1
Cybereason malicious.762a41
TrendMicro HKTL_PASSVIEW
Cyren W32/PWS.JQOY-8963
Symantec PasswordRevealer
ESET-NOD32 Win32/PSWTool.RDPassView.NAA potentially unsafe
TheHacker Trojan/IEPassView.g
Avast Win32:PSWtool-V [PUP]
GData Application.GenericKD.3863045
Kaspersky not-a-virus:PSWTool.Win32.IEPassView.cg
BitDefender Application.GenericKD.3863045
ViRobot PSWTool.IEPassView.33280.A
Ad-Aware Application.GenericKD.3863045
Sophos NirSoft (PUA)
F-Secure Application.GenericKD.3863045
DrWeb Tool.Netpass
VIPRE Nirsoft Password Recovery (not malicious)
McAfee-GW-Edition HTool-PassView
Trapmine suspicious.low.ml.score
F-Prot W32/Pwstool.I
Endgame malicious (moderate confidence)
Webroot W32.Hacktool.Gen
Antiy-AVL Trojan[PSWTool]/Win32.IEPassView
Microsoft HackTool:Win32/Passview
Jiangmin AdWare/IEPassView.a
Arcabit Application.Generic.D3AF205
ZoneAlarm not-a-virus:PSWTool.Win32.IEPassView.cg
AhnLab-V3 HackTool/Win32.PassViewer.R98060
McAfee HTool-PassView
MAX malware (ai score=98)
Malwarebytes PUP.Optional.PasswordTool
TrendMicro-HouseCall HKTL_PASSVIEW
Rising Malware.Undefined!8.C (CLOUD)
Fortinet Riskware/IEPassView
AVG Win32:PSWtool-V [PUP]

How to remove PUP.Optional.PasswordTool?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Application.Bundler.DomaIQ.Q (B) removal guide

The Application.Bundler.DomaIQ.Q (B) is considered dangerous by lots of security experts. When this infection is…

14 mins ago

Jatif.4890 information

The Jatif.4890 is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago

Midie.127575 removal

The Midie.127575 is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago

Malware.AI.1974689421 malicious file

The Malware.AI.1974689421 is considered dangerous by lots of security experts. When this infection is active,…

20 mins ago

Generic.Dacic.94CCEEA9.A.32453306 (file analysis)

The Generic.Dacic.94CCEEA9.A.32453306 is considered dangerous by lots of security experts. When this infection is active,…

35 mins ago

Fugrafa.312973 information

The Fugrafa.312973 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago