Categories: Malware

About “PWS:Win32/Fignotok!pz” infection

The PWS:Win32/Fignotok!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:Win32/Fignotok!pz virus can do?

Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Checks for the presence of known windows from debuggers and forensic tools
Harvests information related to installed instant messenger clients
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine PWS:Win32/Fignotok!pz?


File Info:
name: FADC7DA97023307A07AC.mlwpath: /opt/CAPEv2/storage/binaries/89074950d042491051910baa679064c841a95f03c50c93c5439988ac579a98e8crc32: 07FAEADBmd5: fadc7da97023307a07ac188d09a7f2f0sha1: aa5dc9c34dbeb06f53bdcd0d0f623a105591019fsha256: 89074950d042491051910baa679064c841a95f03c50c93c5439988ac579a98e8sha512: 07e228c68b368d0e0b9978e879c8fc7e87f3c81e06db6ddd4ad55a3f545c4cad7869e51c87f6c00799b327861e373f4a920d8afbd0ea94929de6beb0eeb4b35bssdeep: 49152:oGggui4ljAvjwwj2F+OWhUfOCX/wpBTzRrydkEbrBl6cp47s:2r9jQjwwqvSCXIpFNOdFr76cK7stype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T124E5231373D29073E88751B15299AB30DFFAB9201935999B9FE40E846E30761EF3274Bsha3_384: d6ffa263d5e2592cf8249d80347b2ff2bd6a0a6432aaa914d6ee254ada0e7ec8a33306ba671f8e6505043921eb754824ep_bytes: 558bec6aff68d0d8440068d459440064timestamp: 2009-12-18 19:48:31
Version Info:
0: [No Data]

PWS:Win32/Fignotok!pz also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Fignotok-M [Trj]
tehtris	Generic.Malware
DrWeb	Trojan.PWS.Dybalom
MicroWorld-eScan	Gen:Variant.Graftor.1203
FireEye	Generic.mg.fadc7da97023307a
CAT-QuickHeal	Trojanpws.Fignotok.27946
Skyhigh	PWS-Dybalom.gen.a
McAfee	PWS-Dybalom.gen.a
Cylance	unsafe
Zillya	Trojan.Dybalom.Win32.2848
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	TrojanPSW:Win32/Fignotok.86bc2c4b
K7GW	Password-Stealer ( 00134e5f1 )
K7AntiVirus	Password-Stealer ( 00134e5f1 )
BitDefenderTheta	AI:Packer.BBA47CF31E
VirIT	Trojan.Win32.Dybalom.BKN
Symantec	Infostealer
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/PSW.Fignotok.A
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Trojan.Dybalom-894
Kaspersky	Trojan-PSW.Win32.Dybalom.bkn
BitDefender	Gen:Variant.Graftor.1203
NANO-Antivirus	Trojan.Win32.TrjGen.cvbopr
Avast	Win32:Fignotok-M [Trj]
Tencent	Win32.Trojan-QQPass.QQRob.Najl
TACHYON	Trojan-PWS/W32.Dybalom.3194880
Emsisoft	Gen:Variant.Graftor.1203 (B)
F-Secure	Trojan.TR/PSW.Dybalom.bkh.1
Baidu	Win32.Trojan-PSW.Agent.c
VIPRE	Gen:Variant.Graftor.1203
TrendMicro	TROJ_FIGNOTO.SMA
Trapmine	malicious.high.ml.score
Sophos	Mal/PWS-FB
Ikarus	Virus.Win32.Vundo
Jiangmin	Trojan/PSW.Dybalom.mc
Google	Detected
Avira	TR/PSW.Dybalom.bkh.1
Antiy-AVL	Trojan[PSW]/Win32.Fignotok
Kingsoft	Win32.PSWTroj.Undef.a
Microsoft	PWS:Win32/Fignotok!pz
Xcitium	TrojWare.Win32.PSW.Dybalom.~FAT@1v5v1y
Arcabit	Trojan.Graftor.D4B3
ViRobot	Trojan.Win32.PSWDybalom.679936
ZoneAlarm	Trojan-PSW.Win32.Dybalom.bkn
GData	Gen:Variant.Graftor.1203
AhnLab-V3	Win-Trojan/Keylogger.217600.C
ALYac	Gen:Variant.Graftor.1203
MAX	malware (ai score=100)
VBA32	Trojan-Spy.VK.0383
Malwarebytes	Generic.Malware.AI.DDS
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_FIGNOTO.SMA
Rising	Dropper.Win32.Undef.cad (CLASSIC)
Yandex	Trojan.GenAsa!m373mwwYlfs
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.12582!tr
Zoner	Trojan.Win32.33868
Cybereason	malicious.970233
DeepInstinct	MALICIOUS
alibabacloud	RiskWare:Win/Fignotok.A