Categories: Spy

Spyware.PasswordStealer.XGen removal instruction

The Spyware.PasswordStealer.XGen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.PasswordStealer.XGen virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware.PasswordStealer.XGen?


File Info:
crc32: 4A438A3Dmd5: fe3593636ab753c5eb95b802e67e39bfname: FE3593636AB753C5EB95B802E67E39BF.mlwsha1: b670835572e9ec112cc1af6f7f725148ef15ea58sha256: 86fd2d5db7449d6f351092918c602a320efe9ceef723f45d99222f26bacaff81sha512: e1aab487efcca777bdbbe95433d95a28b350236f0c70f9a043a11e7438f826d085bf0446d5731847c87e5fe1df6d9e0e86a134af2e03f4c39ee01cb36897d132ssdeep: 6144:e3o0l7eHqiXP5+gyFNjz74JONiv47fvdZwHo9L6sqPgaGAP7HaKZC9Ih:e3ow7eH5/MLNjzjL73wQ6tPIAP76ICWtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Spyware.PasswordStealer.XGen also known as:

Bkav	W32.MosquitoQKB.Fam.Trojan
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.5538383
FireEye	Generic.mg.fe3593636ab753c5
ALYac	Trojan.Generic.5538383
Cylance	Unsafe
VIPRE	Packed.Win32.PWSZbot.gen (v)
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( f1000f011 )
BitDefender	Trojan.Generic.5538383
K7GW	Trojan ( f1000f011 )
Cybereason	malicious.36ab75
Cyren	W32/Risk.RFIG-2427
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:MalOb-FT [Cryp]
ClamAV	Win.Trojan.5538383-1
Kaspersky	Trojan-Ransom.Win32.PornoCodec.ch
Alibaba	Ransom:Win32/PornoCodec.718c5182
NANO-Antivirus	Trojan.Win32.Winlock.mkjea
ViRobot	Trojan.Win32.A.PornoCodec.249316
Tencent	Win32.Trojan.Pornocodec.Eeqv
Ad-Aware	Trojan.Generic.5538383
Emsisoft	Trojan.Generic.5538383 (B)
Comodo	TrojWare.Win32.Trojan.XPACK.Gen@2ho5ur
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.Winlock.2953
Zillya	Trojan.PornoCodec.Win32.71
TrendMicro	BKDR_QAKBOT.SMG
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Sophos	Mal/Generic-R + Mal/FakeAV-BW
Ikarus	Trojan-Ransom.Gimemo
Jiangmin	Trojan/PornoCodec.ci
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
eGambit	Generic.Malware
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Ransom]/Win32.PornoCodec
Microsoft	Trojan:Win32/Vigorf.A
Arcabit	Trojan.Generic.D54824F
SUPERAntiSpyware	Trojan.Agent/Gen-DitherC
ZoneAlarm	Trojan-Ransom.Win32.PornoCodec.ch
GData	Trojan.Generic.5538383
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zbot.R2835
McAfee	Artemis!FE3593636AB7
VBA32	Trojan.Zeus.EA.0999
Malwarebytes	Spyware.PasswordStealer.XGen
Panda	Generic Malware
ESET-NOD32	a variant of Win32/Kryptik.KWS
TrendMicro-HouseCall	BKDR_QAKBOT.SMG
Rising	Ransom.Genasom!8.293 (CLOUD)
Yandex	Trojan.GenAsa!aqC+B3y8kFY
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1705034.susgen
Fortinet	W32/Krap.A!tr
BitDefenderTheta	AI:Packer.550DEAE21F
AVG	Win32:MalOb-FT [Cryp]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Ransom.59a