Should I remove "Trojan-PSW.Win32.Stelega.da"?

The Trojan-PSW.Win32.Stelega.da is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.Win32.Stelega.da virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-PSW.Win32.Stelega.da?


File Info:
crc32: 1F926C32
md5: 868fa8a88ce68d4824f08b304ea87b38
name: key.exe
sha1: 8286d300fe0a34104ca5210d4fe449ae92292dc7
sha256: 3b3359ee213d426db8bc231efc7cf36c6ec8585204b33107b0989c533963b971
sha512: 9d3de7f7810e67506e46ed901ed810c9f9189baa937ce910ce2597ad3eee914f473592d2c485f526fec059fdee076720303cac18d47411c7dfb80f664d193979
ssdeep: 24576:Ltb20pkaCqT5TBWgNQ7a/CeTJkQouY8fmudCpDba+nG6RUA7gKFO/GcuHB86A:IVg5tQ7a/Celkd2gpx0A7gKFOUHG5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0809 0x04b0

Trojan-PSW.Win32.Stelega.da also known as:

Qihoo-360	HEUR/QVM10.1.C5E8.Malware.Gen
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_60% (W)
APEX	Malicious
Paloalto	generic.ml
GData	Win32.Packed.Kryptik.XIBKS1
Kaspersky	Trojan-PSW.Win32.Stelega.da
Alibaba	Trojan:Win32/autoit.ali2000008
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.868fa8a88ce68d48
Cyren	W32/AutoIt.OM.gen!Eldorado
Endgame	malicious (high confidence)
ZoneAlarm	Trojan-PSW.Win32.Stelega.da
Microsoft	Trojan:Win32/Wacatac.C!ml
AhnLab-V3	Win-Trojan/AutoInj.Exp
McAfee	Artemis!868FA8A88CE6
Malwarebytes	Trojan.MalPack.AutoIt
ESET-NOD32	a variant of Win32/Injector.Autoit.FDN
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_85%
Fortinet	AutoIt/Injector.FDH!tr
Cybereason	malicious.0fe0a3
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan-PSW.Win32.Stelega.da?

Trojan-PSW.Win32.Stelega.da removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan-PSW.Win32.Stelega.da”?