Trojan

Trojan.PasswordStealer.Generic removal tips

Malware Removal

The Trojan.PasswordStealer.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.PasswordStealer.Generic virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.PasswordStealer.Generic?


File Info:

crc32: ACA7D355
md5: 7fbbb3ad5b457e101cc8b473483dbc16
name: 7FBBB3AD5B457E101CC8B473483DBC16.mlw
sha1: e61250cb64f5657fd2e6673a57ca751bc8c3ec5d
sha256: 6013518d6d9416e322715ac84118ac7b35cc16e363cc3eaaa2822c9dd2a9d5d9
sha512: 1505cf0fbbced856bc62a89789e252618cc557bf9c0e1846d6e2281509953a8d724e5253025062c90c0c8d963089bd72c8f249111b5deb93988b8216d43e983a
ssdeep: 6144:6D5/kzdkwlm9w+yTCwf9knT/quXYDGtC0toFFVx+O8iq8A3TQs:dzCa/TCy9q7quX402FFp8igDQs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.PasswordStealer.Generic also known as:

K7AntiVirusTrojan ( 00526f5f1 )
LionicTrojan.Win32.Generic.i!c
Elasticmalicious (high confidence)
DrWebTrojan.Nanocore.23
CynetMalicious (score: 99)
ALYacGen:Variant.Ursu.95844
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.105725
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojan:Win32/runner.ali1000123
K7GWTrojan ( 00526f5f1 )
Cybereasonmalicious.d5b457
CyrenW32/MSIL_Troj.MP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.MVW
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Packed.Score-7012072-0
KasperskyHEUR:Trojan-PSW.Win32.Generic
BitDefenderGen:Variant.Ursu.95844
NANO-AntivirusTrojan.Win32.Nanocore.exyvde
MicroWorld-eScanGen:Variant.Ursu.95844
TencentWin32.Trojan-qqpass.Qqrob.Ammt
ComodoMalware@#a0xe7kpvgukn
BitDefenderThetaGen:NN.ZemsilF.34236.nm0@aqLmHAr
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.7fbbb3ad5b457e10
EmsisoftGen:Variant.Ursu.95844 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1108512
MicrosoftTrojan:Win32/Occamy.B
GDataGen:Variant.Ursu.95844
AhnLab-V3Trojan/Win32.Agent.C2410095
McAfeeArtemis!7FBBB3AD5B45
MAXmalware (ai score=81)
VBA32Trojan.Nanocore
MalwarebytesTrojan.PasswordStealer.Generic
PandaTrj/CI.A
YandexTrojan.Kryptik!gAApuCcIkUM
IkarusTrojan.MSIL.Inject
FortinetMSIL/Kryptik.MVC!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.PasswordStealer.Generic?

Trojan.PasswordStealer.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment