Should I remove “PWS:Win32/Hacksoft.B”?

The PWS:Win32/Hacksoft.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PWS:Win32/Hacksoft.B virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

How to determine PWS:Win32/Hacksoft.B?


File Info:
crc32: 1A5BFD51
md5: 68dff7ba5148ea6ed743b22ccd4917e9
name: cheatengine52.exe
sha1: 8f503fe294246c9f3d8ffe21272b56446b38277d
sha256: c03240b1545bc359d468ff0aca4af6afcd949488838ccfd9e66a45aa551a7c4f
sha512: 152875eebb5bbff4a91de977a8031ea9f25e891d3e9f33b3d6a3290610054db3f79ec95f07e8d0764eb32a2ed5875d37c888ca6f91a93ca0f3313ea13ac109b0
ssdeep: 98304:edbf81WjqciYmLJS6nHP9ytHuSwrZINhGU6aJm1nwQDrX4:iD4FRYmLJPnHPAtHuSqSNTJiwUX4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileDescription: Cheat Engine 5.2 Setup                                      
FileVersion:                     
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName: Dark Byte                                                   
Translation: 0x0409 0x04e4

PWS:Win32/Hacksoft.B also known as:

MicroWorld-eScan	Gen:Variant.Graftor.711467
McAfee	Generic Dropper.kn.ab
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
BitDefender	Gen:Variant.Graftor.711467
K7GW	Riskware ( 0040f0f51 )
K7AntiVirus	Riskware ( 0040f0f51 )
F-Prot	W32/Trojan2.NDPU
Symantec	Trojan.ADH
GData	Win32.Riskware.Hacktool.Q
Alibaba	HackTool:Win32/SystemCall.6a2d2270
NANO-Antivirus	Trojan.Win32.Hacksoft.ttomu
Sophos	CheatEngine (PUA)
Comodo	Malware@#2e12s757jmhwo
DrWeb	Win32.HLLW.EmudBot.44
TrendMicro	HACKINGTOOLS_ROOTKIT
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.wc
FireEye	Gen:Variant.Graftor.711467
Emsisoft	Gen:Variant.Graftor.711467 (B)
Cyren	W32/Keylogger.CSSZ-7341
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	PWS:Win32/Hacksoft.B
Arcabit	Trojan.Graftor.DADB2B
MAX	malware (ai score=97)
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AA potentially unsafe
TrendMicro-HouseCall	HACKINGTOOLS_ROOTKIT
Rising	Malware.Heuristic!ET (CLOUD)
Yandex	HackTool.CheatEngine!D/suAnyVmQE
eGambit	Unsafe.AI_Score_73%
Fortinet	Riskware/CheatEngine

How to remove PWS:Win32/Hacksoft.B?

PWS:Win32/Hacksoft.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X