Trojan-Banker.Win32.Passteal.ly removal instruction

The Trojan-Banker.Win32.Passteal.ly is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Banker.Win32.Passteal.ly virus can do?

Executable code extraction
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Network activity detected but not expressed in API logs

How to determine Trojan-Banker.Win32.Passteal.ly?


File Info:
crc32: AA81CC17
md5: 6a9b16799c7bcc28c862ba392f4654d0
name: 6A9B16799C7BCC28C862BA392F4654D0.mlw
sha1: 462b5f72ad8219e63339f215fec858f22af5ff44
sha256: 1acc6fd0ad50ff1f893259c2466ece03a08d903530a8a8503fb55133d4b7ff12
sha512: 7939deeb4e429d79117b85633bee7cf6bc723338e4734efcdd645b77af578375cca72e061cd33cc246d27a91219f2c0e4b87df866e42ff664ee79ae13ceb6329
ssdeep: 24576:hEhZ8oB4OVz6NNje181ZUZa/qqgJNl2I1t3:66i4OVAle+1HgJNlrt3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan-Banker.Win32.Passteal.ly also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.2ad821
Cyren	W32/Trojan.AFMC-1721
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.Agent.OLG
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Banker.Win32.Passteal.ly
BitDefender	Trojan.GenericKD.46574743
MicroWorld-eScan	Trojan.GenericKD.46574743
Ad-Aware	Trojan.GenericKD.46574743
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34790.XyW@amSgPBe
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
FireEye	Generic.mg.6a9b16799c7bcc28
Emsisoft	Trojan.GenericKD.46574743 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1114952
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Tnega!ml
AegisLab	Trojan.Multi.Generic.4!c
GData	Trojan.GenericKD.46574743
AhnLab-V3	Trojan/Win.Generic.C4537574
McAfee	RDN/Generic PWS.y
MAX	malware (ai score=81)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0DG421
Rising	Trojan.Generic@ML.99 (RDML:Ol5NQVwMxDTGWBH2qKElcQ)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.OLG!tr.pws
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanPSW.Generic.HgIASXwA

How to remove Trojan-Banker.Win32.Passteal.ly?

Trojan-Banker.Win32.Passteal.ly removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X