Should I remove “Spyware.PasswordStealer.Roblox”?

The Spyware.PasswordStealer.Roblox is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Spyware.PasswordStealer.Roblox virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Spyware.PasswordStealer.Roblox?


File Info:
name: FD5EA345D446FFF7344C.mlw
path: /opt/CAPEv2/storage/binaries/c574cc4b30857eb2df032cbeac215be6cb80c553005619b3e6ddaeec3c52acd6
crc32: 05E73A27
md5: fd5ea345d446fff7344c04e94ef6698e
sha1: 3b027fc195b8eefd8fff25c9a880b08f717e600f
sha256: c574cc4b30857eb2df032cbeac215be6cb80c553005619b3e6ddaeec3c52acd6
sha512: 1867df3df0890b9d4e164c605b7f36f443f08145f8423fcd825f170f3cb7fda382715caee718d1fd97694b6bc945b3052578de2e599409bd3c3b77882b6e899e
ssdeep: 196608:02uA0sMjm1DhtEAksY0QjXcDsio5jTMa0wWlfe1U:R7P1DhtEAk/1zieAa0wWlfe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D996336EB3FE4953EB362AF8046BDF144473DCDCC8D9A22322607555687811FE384BA6
sha3_384: e5fea1639e27dd796a7ddf470edf21c893fd5551ad00bedf7ca6c55b0583e0c5921dfedaf4c7d2a19858e98f5c21302b
ep_bytes: ff250020400000000000000000000000
timestamp: 2051-05-15 05:11:36

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: robux gen
FileVersion: 1.0.0.0
InternalName: Robux Generator.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: Robux Generator.exe
ProductName: robux gen
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Spyware.PasswordStealer.Roblox also known as:

MicroWorld-eScan	Trojan.GenericKD.50261037
ALYac	Trojan.GenericKD.50261037
Sangfor	Trojan.MSIL.Agent.PGD
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:MSIL/Generic.39e9c3c6
K7GW	Password-Stealer ( 004c26ed1 )
K7AntiVirus	Password-Stealer ( 004c26ed1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/PSW.Agent.PGD
APEX	Malicious
BitDefender	Trojan.GenericKD.50261037
Avast	Win32:Trojan-gen
Ad-Aware	Trojan.GenericKD.50261037
Emsisoft	Trojan.GenericKD.50261037 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
FireEye	Generic.mg.fd5ea345d446fff7
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.Y2HUTA
Avira	TR/Spy.Gen
MAX	malware (ai score=83)
Arcabit	Trojan.Generic.D2FEEC2D
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!FD5EA345D446
Malwarebytes	Spyware.PasswordStealer.Roblox
TrendMicro-HouseCall	TROJ_GEN.R002H0AE522
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.PGD!tr.pws
BitDefenderTheta	Gen:NN.ZemsilF.34638.@p0@aqvf3Mm
AVG	Win32:Trojan-gen
Cybereason	malicious.195b8e

How to remove Spyware.PasswordStealer.Roblox?

Spyware.PasswordStealer.Roblox removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X