Spy

Spyware.TSTStealer.FPNL removal instruction

Malware Removal

The Spyware.TSTStealer.FPNL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.TSTStealer.FPNL virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Spyware.TSTStealer.FPNL?


File Info:

crc32: 70787E75
md5: bdc77664506287fb4439012abd51f259
name: stler.exe
sha1: 3598be3c5bea135d5f538a79b9d58092f427013d
sha256: 1b9d31951adfc2f38d26142a4c6653c52a5bfad3849900506fd5928e9d88d035
sha512: 6eb3545a2bbab8c71a02d060f227c3fe05946be25e3628f40f3ef6856d7d0cf6fdf629e76ed91d26ef041e26051c0d72782f6211bdfeab094e858035887756d0
ssdeep: 12288:vDLz2f/tevuOS1TR7EZqlGE5ukoK2o18S02e:vzcdH4uu2nFe
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: PTROLaDer VOKEan InterTAIMEnt vc.
InternalName: Yteraskol
FileVersion: 7.03.0034
CompanyName: PremeUnasa
Comments: GroTESKoler DuySay Malibu
ProductName:
ProductVersion: 7.03.0034
FileDescription: GroTESKoler DuySay Malibu
OriginalFilename: Yteraskol.exe

Spyware.TSTStealer.FPNL also known as:

DrWebTrojan.PWS.Siggen2.40737
MicroWorld-eScanTrojan.GenericKD.32810157
CAT-QuickHealHeur.Rootkit
ALYacTrojan.GenericKD.32810157
MalwarebytesSpyware.TSTStealer.FPNL
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0055d44f1 )
BitDefenderTrojan.GenericKD.32810157
K7GWTrojan ( 0055d44f1 )
Cybereasonmalicious.c5bea1
TrendMicroTROJ_GEN.R020C0WLF19
BitDefenderThetaGen:NN.ZemsilF.33550.2m2@aCarb6mi
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R020C0WLF19
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.32810157
KasperskyHEUR:Rootkit.MSIL.Agent.gen
AlibabaTrojan:MSIL/GenKryptik.08b4cbdd
ViRobotTrojan.Win32.S.Infostealer.890656
AegisLabTrojan.Win32.Generic.4!c
Ad-AwareTrojan.GenericKD.32810157
SophosMal/Generic-S
F-SecureTrojan.TR/Kryptik.zunok
McAfee-GW-EditionRDN/Generic.rp
Trapminesuspicious.low.ml.score
FireEyeTrojan.GenericKD.32810157
EmsisoftTrojan.GenericKD.32810157 (B)
IkarusTrojan.MSIL.Krypt
CyrenW32/Trojan.RBZF-1065
AviraTR/Kryptik.zunok
ArcabitTrojan.Generic.D1F4A4AD
ZoneAlarmHEUR:Rootkit.MSIL.Agent.gen
MicrosoftTrojan:Win32/Occamy.C
McAfeeRDN/Generic.rp
VBA32TScope.Trojan.MSIL
CylanceUnsafe
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/GenKryptik.DZVX
YandexTrojan.PWS.Azorult!
SentinelOneDFI – Malicious PE
FortinetMSIL/GenKryptik.DZVX!tr
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_70% (W)
Qihoo-360Win32/Trojan.aa1

How to remove Spyware.TSTStealer.FPNL?

Spyware.TSTStealer.FPNL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment