Spy

Spyware.Stealc removal tips

Malware Removal

The Spyware.Stealc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.Stealc virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid

How to determine Spyware.Stealc?


File Info:

name: 379656262D018E26BA6B.mlw
path: /opt/CAPEv2/storage/binaries/5780ed8b0d40ad27404f10cd789f6b9e6bf58d78a046ad51a6bd9bb7c596989a
crc32: 7C01A93E
md5: 379656262d018e26ba6b07ca3bf10d50
sha1: f551911393cf7e88b8f15f2101e15573092d02f5
sha256: 5780ed8b0d40ad27404f10cd789f6b9e6bf58d78a046ad51a6bd9bb7c596989a
sha512: 5f9dffaab33d6ae09b6d15c25c42f55da9d0eb0409378ccf135863365de4398ad462aa8f6d6a367fd66ad3e5453253b0e461a0732e719cca2ae80a76df966dc3
ssdeep: 24576:NPBTw/qe21O+sCeviQoSsgAO2CuqYqYSgAisj4Keqv9B28+rB8c+AQqLQMJ2gV:DFqifHCuqYqjH28Hc+Ah5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A8B5B40CB2E0DCB0C7A9817A3745CA6DD114FA341E0AE966F7D6EB5B21340CAD19EB17
sha3_384: 613bc127eda839d3f6200731fef439a629a8d0daa3704e3827bba4d1904897148b3709c90f22e65f030b35040ef8700c
ep_bytes: 83ec1cc7042401000000ff1560326200
timestamp: 2023-07-14 14:33:16

Version Info:

0: [No Data]

Spyware.Stealc also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Stealerc.4!c
CynetMalicious (score: 99)
FireEyeGeneric.mg.379656262d018e26
ALYacGen:Variant.Babar.227482
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:Win32/Stealerc.8cef3a1d
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZexaF.36318.mMW@aaucDbai
VirITTrojan.Win32.Genus.SFY
CyrenW32/ABRisk.UQNQ-6772
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/GenKryptik.GLWD
APEXMalicious
KasperskyHEUR:Trojan-PSW.Win32.Stealerc.gen
BitDefenderGen:Variant.Babar.227482
MicroWorld-eScanGen:Variant.Babar.227482
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.13ea59a3
EmsisoftGen:Variant.Babar.227482 (B)
F-SecureTrojan.TR/Redcap.qhrvb
DrWebTrojan.DownLoader45.62587
VIPREGen:Variant.Babar.227482
TrendMicroTrojanSpy.Win32.STEALC.YXDGUZ
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
GDataGen:Variant.Babar.227482
WebrootW32.Trojan.Leonem
AviraTR/Redcap.qhrvb
Antiy-AVLTrojan/Win32.GenKryptik
ArcabitTrojan.Babar.D3789A
ZoneAlarmHEUR:Trojan-PSW.Win32.Stealerc.gen
MicrosoftTrojan:Win32/Leonem
GoogleDetected
AhnLab-V3Trojan/Win.Leonem.C5459863
McAfeeArtemis!379656262D01
MAXmalware (ai score=87)
VBA32TrojanRansom.Stealc
MalwarebytesSpyware.Stealc
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojanSpy.Win32.STEALC.YXDGUZ
RisingStealer.Stealerc!8.17BE0 (CLOUD)
YandexTrojan.GenKryptik!maicx90WloM
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.202870010.susgen
FortinetW32/GenKryptik.GLWD!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Spyware.Stealc?

Spyware.Stealc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment