Trojan-PSW.Python.WiPass removal

The Trojan-PSW.Python.WiPass is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.Python.WiPass virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the PyInstaller malware family

How to determine Trojan-PSW.Python.WiPass?

File Info:
name: 050D29540DF8C29C772F.mlw
path: /opt/CAPEv2/storage/binaries/faaadf1a8786ea7283e30ecb2a1554d8b21296a005f09911b76ddf525eae41d0
crc32: BFAA4A75
md5: 050d29540df8c29c772fd8bb3cae9243
sha1: 218582c7ef8aad3600e6ad627e88a2c20086de47
sha256: faaadf1a8786ea7283e30ecb2a1554d8b21296a005f09911b76ddf525eae41d0
sha512: df86cdffc1cc987e9c82627d158c0cbc972da07d7d84907df2dae2dfd59f58ea38690b1111208a3406c95133684be6a600e813ce85d5225857779aa24f58ec38
ssdeep: 196608:vGTEbGXVnICteEroXxoczlxZV3Gu5D4S267ygEGPt2CS30j8kgw26TQvDp7lzY:IEOInEroXF14S2D7qcDw26A7Y
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T171A6330AF7A408FEE55B4637D864E536C0B274204388E56F2ADCAC275EAB3D57E74B01
sha3_384: 329fbeb4c4ed95f9fb525e54f3d0ad186c8be5b854931680e7c50fff17e27327a18cd76b7b72862adc1cdf6a7662dfe1
ep_bytes: 4883ec28e8f70400004883c428e972fe
timestamp: 2021-11-09 18:03:59

Version Info:
0: [No Data]

Trojan-PSW.Python.WiPass also known as:

How to remove Trojan-PSW.Python.WiPass?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.