Should I remove "PUP.Optional.VNCPasswordTool"?

The PUP.Optional.VNCPasswordTool is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.VNCPasswordTool virus can do?

Unconventionial language used in binary resources: Hebrew
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUP.Optional.VNCPasswordTool?


File Info:
crc32: 0A54A3DC
md5: 3b33a134cb7ce76859f25dd246da50d6
name: vncpassview.exe
sha1: 37adb7c54943b338000cefce6d895c05468fa2ce
sha256: ba5c4766fd2fbf9e0c76444f152b861b9977f1b23c963a9c8b8a6970c43bcde6
sha512: acab9d3c862934617ba3ede342681e91e0232cda1b2ad9b7d2595f0cd31f8c41ac911a323d94bf865571a38041293b90bde23a4049c6c90fc911b7d3f26f68ba
ssdeep: 768:qTJP8LHdCut1D473mNVQ4rkyaE9jfhrnOuK:cJUL9LPQ2NVQ4IcxnOuK
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright xa9 2007 - 2009  Nir Sofer
InternalName: VNCPassView
FileVersion: 1.02
CompanyName: NirSoft
ProductName: VNCPassView
ProductVersion: 1.02
FileDescription: VNCPassView
OriginalFilename: VNCPassView.exe
Translation: 0x0409 0x04b0

PUP.Optional.VNCPasswordTool also known as:

MicroWorld-eScan	Gen:Application.Heur.bmKfkeUQ7KfO
FireEye	Gen:Application.Heur.bmKfkeUQ7KfO
McAfee	Tool-PassView
Cylance	Unsafe
VIPRE	Nirsoft Password Recovery (not malicious)
Alibaba	HackTool:Win32/Passview.5408c4cb
Cyren	W32/PWS.RICR-8044
ESET-NOD32	Win32/PSWTool.VNCPassView.102 potentially unsafe
ClamAV	Win.Tool.VncDump-1
GData	Gen:Application.Heur.bmKfkeUQ7KfO
Kaspersky	not-a-virus:PSWTool.Win32.VNCPwdump.b
BitDefender	Gen:Application.Heur.bmKfkeUQ7KfO
Ad-Aware	Gen:Application.Heur.bmKfkeUQ7KfO
Emsisoft	Gen:Application.Heur.bmKfkeUQ7KfO (B)
Comodo	ApplicUnwnt@#13k6ji047om49
DrWeb	Tool.PassView.358
Zillya	Tool.NetPass.Win32.173
McAfee-GW-Edition	Tool-PassView
CMC	PSWTool.Win32.VNCPwdump!O
F-Prot	W32/Pwstool.E
Jiangmin	Adware/InternetAntivirus.an
Webroot	W32.Hacktool.Gen
MAX	malware (ai score=99)
Antiy-AVL	Trojan[PSWTool]/Win32.VNCPwdump
Arcabit	Application.Heur.bmKfkeUQ7KfO
ViRobot	PSWTool.NetPass.30720.C
ZoneAlarm	not-a-virus:PSWTool.Win32.VNCPwdump.b
Microsoft	HackTool:Win32/Passview
AhnLab-V3	Win-Trojan/Agent.30720.AVW
Malwarebytes	PUP.Optional.VNCPasswordTool
eGambit	Generic.Malware
Fortinet	Riskware/VNCPwdump
MaxSecure	Trojan.Malware.2883272.susgen
AVG	FileRepMalware [PUP]
Cybereason	malicious.4cb7ce
Avast	FileRepMalware [PUP]

How to remove PUP.Optional.VNCPasswordTool?

PUP.Optional.VNCPasswordTool removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “PUP.Optional.VNCPasswordTool”?