Malware

PWS:MSIL/Seartam.A removal

Malware Removal

The PWS:MSIL/Seartam.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:MSIL/Seartam.A virus can do?

  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself

How to determine PWS:MSIL/Seartam.A?


File Info:

name: CEB18D8BE7F2A5638B3B.mlw
path: /opt/CAPEv2/storage/binaries/35884168a76f573806f956eae433eac3d7d0c34b40d7b003295f71f350f248b2
crc32: E6AB4AC9
md5: ceb18d8be7f2a5638b3b507ec9f050a2
sha1: 4d78e74ea90afec9bd3099ad04cdf70ec850c084
sha256: 35884168a76f573806f956eae433eac3d7d0c34b40d7b003295f71f350f248b2
sha512: 1fe6bd0f551db7b5e2f8575e998cdb1800bfc19025932eb8990ca07aa7f6697fad92d41abd3ef234d112e1eee09059763f6d03d6e3806e17f4a7e5fd4566a919
ssdeep: 6144:igmMy0K+UF6J+p7ndo3gL4PR/7JAHpMXUJ73j7IbjSVgDxD:ig9K2wDJ73jMMgZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14544EC9BFD815B58EA7DBBB280F6020083A545D35E45E8746DD305966EC23EBC0E8CE7
sha3_384: cf197a2f46f288a335719a11e860bafc159ea22c7a1fa4a9186aa863bbc797fd6e47a4e4467fed1d5e028abb2845eee0
ep_bytes: ff250020400000000000000000000000
timestamp: 2009-09-01 19:09:48

Version Info:

Comments: COD6MW2_HACK
FileDescription: COD6MW2_HACK
FileVersion:
InternalName:
LegalCopyright: COD6MW2_HACK
OriginalFilename:
ProductName:
ProductVersion:
Assembly Version:
Translation: 0x0000 0x04b0

PWS:MSIL/Seartam.A also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.Agent.i!c
DrWebTrojan.PWS.Siggen2.3502
MicroWorld-eScanGen:Variant.Lazy.350056
SkyhighBehavesLike.Win32.Generic.dh
McAfeeArtemis!CEB18D8BE7F2
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.350056
SangforSuspicious.Win32.Save.a
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojanPSW:MSIL/Seartam.24dd38e6
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZemsilF.36744.pm1@aGQaD6m
VirITTrojan.Win32.Generic.ASJH
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32MSIL/PSW.Agent.NAF
APEXMalicious
ClamAVWin.Spyware.67357-2
KasperskyTrojan-PSW.MSIL.Agent.am
BitDefenderGen:Variant.Lazy.350056
NANO-AntivirusTrojan.Win32.Agent.ddbkmp
AvastWin32:Trojan-gen
TencentMsil.Trojan-QQPass.QQRob.Ddhl
EmsisoftGen:Variant.Lazy.350056 (B)
GoogleDetected
F-SecureTrojan.TR/Downloader.Gen
ZillyaTrojan.Agent.Win32.80465
FireEyeGeneric.mg.ceb18d8be7f2a563
SophosMal/MDrop-IX
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Lazy.350056
JiangminTrojan/PSW.MSIL.pi
WebrootW32.Infostealer.Gen
VaristW32/Agent.FY.gen!Eldorado
AviraTR/Downloader.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan[PSW]/MSIL.Agent
KingsoftWin32.PSWTroj.Undef.a
XcitiumTrojWare.Win32.PSW.MSILAgent.AM0@1nmxid
ArcabitTrojan.Lazy.D55768
ZoneAlarmTrojan-PSW.MSIL.Agent.am
MicrosoftPWS:MSIL/Seartam.A
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.RL_Seartam.C4005448
ALYacGen:Variant.Lazy.350056
VBA32TScope.Trojan.MSIL
Cylanceunsafe
PandaGeneric Malware
RisingStealer.Agent!8.C2 (CLOUD)
YandexTrojan.MalwareS!CRhjQrv7J8Q
IkarusPWS.MSIL
MaxSecureTrojan.Malware.871233.susgen
FortinetMSIL/Generic.AP.B9C36E!tr
AVGWin32:Trojan-gen
DeepInstinctMALICIOUS

How to remove PWS:MSIL/Seartam.A?

PWS:MSIL/Seartam.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment