Trojan

How to remove “TrojanPSW.FireThief”?

Malware Removal

The TrojanPSW.FireThief is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanPSW.FireThief virus can do?

  • Reads data out of its own binary image
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine TrojanPSW.FireThief?


File Info:

crc32: A5AAB065
md5: dd21ee673149296f7ced24f5fdf8c7ef
name: DD21EE673149296F7CED24F5FDF8C7EF.mlw
sha1: 1d8f918e11e64f9895eea51a456ed9d71fedbcd0
sha256: df7b55121e0ec902c39fde6ca2d56aef85b14427d1693b222b4cdd208cc87729
sha512: 70ed6b59b62b0d70beb4af5c6279c475e263d70640cd532014b983e2c94bd3ce9d6fdd8dfb6ee2ba3d47f67c4620dacff99e5e4704f34c874e9dd853f60e39e1
ssdeep: 1536:a2NjW19+O7806kpg+Crr8bBUIASxXodLFuqsofT0GhtxMKILHfht8cpCMoJDTF2:a4iSO7806h+uvhtxM8G
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

TrojanPSW.FireThief also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004bcce41 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.Keygen.Win32.5644
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
K7GWTrojan ( 004bcce41 )
Cybereasonmalicious.e11e64
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Keygen.BH potentially unsafe
APEXMalicious
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.114b074b
SophosGeneric ML PUA (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Picsys.jt
FireEyeGeneric.mg.dd21ee673149296f
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.gcrd
AviraTR/Crypt.XPACK.Gen3
eGambitGeneric.Malware
Antiy-AVLTrojan/Generic.ASMalwS.1858719
MicrosoftTrojan:Win32/Wacatac.B!ml
Acronissuspicious
VBA32TrojanPSW.FireThief
MalwarebytesRiskWare.Tool.CK
YandexTrojan.GenAsa!6Nu6klqyEQ8
Ikarusnot-a-virus:Keygen.SuspectCRC
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove TrojanPSW.FireThief?

TrojanPSW.FireThief removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment