Trojan

Trojan-PSW.Win32.Reline removal tips

Malware Removal

The Trojan-PSW.Win32.Reline is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan-PSW.Win32.Reline virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs

How to determine Trojan-PSW.Win32.Reline?



File Info:

crc32: C723BECA
md5: 1b831d6762d505bdb1d3588965767e5e
name: 1B831D6762D505BDB1D3588965767E5E.mlw
sha1: b729577d98a5f41218639e5f2406f6f54a09a083
sha256: 2738373f0b008beb61553747e56cb623befa5e44a43b322cc4b74e7508ec24cb
sha512: 245593fb91a9040c77e2c9d86fc71ceebb1e1e9ec53810d208d5d0e27385b6e99694e4e9a08a0a54459f35aeade99343e66f0b4511793117b8fbf0f8cd4c1e03
ssdeep: 49152:T5+hFcMtmeBse0i0+wMHohjENLfayUmOH0K7893u2ecWraUE7ndI/fM1:T5aFc1eBsI0QIhi2UF9+GOaV7q/01
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: xa9 Malwarebytes. All rights reserved.
InternalName: mbam.exe
FileVersion: 4.0.0.987
CompanyName: Malwarebytes
Builder: lolsasha123zzz@gmail.com 17:09:59 07/06/2021
Created: 7z SFX Constructor v4.5.0.0 (http://usbtor.ru/viewtopic.php?t=798)
ProductName: Malwarebytes
ProductVersion: 0.0.0.0
FileDescription: Malwarebytes
OriginalFilename: mbam.exe
Translation: 0x0000 0x04b0

Trojan-PSW.Win32.Reline also known as:

BkavW32.AIDetect.malware1
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.46466462
SangforTrojan.Win32.Save.a
AlibabaTrojanPSW:Win32/Reline.f8f4153a
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Coinminer-9835184-0
KasperskyHEUR:Trojan-PSW.Win32.Reline.gen
BitDefenderTrojan.GenericKD.46466462
MicroWorld-eScanTrojan.GenericKD.46466462
Ad-AwareTrojan.GenericKD.46466462
SophosGeneric PUA LH (PUA)
ComodoTrojWare.Win32.Agent.lhndx@0
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
FireEyeGeneric.mg.1b831d6762d505bd
EmsisoftTrojan.GenericKD.46466462 (B)
AviraTR/Redcap.yzfrp
Antiy-AVLTrojan/Generic.ASMalwS.30F32DF
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D2C5059E
AegisLabTrojan.Win32.Reline.i!c
ZoneAlarmHEUR:Trojan-PSW.Win32.Reline.gen
GDataTrojan.GenericKD.46466462
AhnLab-V3Malware/Win.Generic.C4521269
McAfeeArtemis!1B831D6762D5
MAXmalware (ai score=80)
VBA32TrojanPSW.Reline
MalwarebytesSpyware.RedLineStealer
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H07FA21
FortinetW32/Reline!tr.pws
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-PSW.Win32.Reline?

Trojan-PSW.Win32.Reline removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment