Trojan

TrojanPWS.Crypt removal instruction

Malware Removal

The TrojanPWS.Crypt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanPWS.Crypt virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Anomalous binary characteristics

How to determine TrojanPWS.Crypt?


File Info:

crc32: 63CE7461
md5: aa614a95a5573add6a8e7f141b0a85ae
name: AA614A95A5573ADD6A8E7F141B0A85AE.mlw
sha1: 355c2f1eb201201433b3079ada221bf751ba1732
sha256: b01528ec9ef55d3181364dab261660fc040a13aa65861c4c516e3a7db8fc6733
sha512: b2f8cef7f2f1e754264b79e66fbd3f18ab72b39632e36ec14ba09246bfd2958187702b364f549cbad73b607f768e4662e830bdfd58aaf59693d871160364cefb
ssdeep: 24576:yIg35fN3uyvd9DUctvJMAsb+NtKWMRf3Qw8JWwXKFcaoQGgwvABC0Htl+rfTeKIE:K3uyvd1UctD4/Rf9PFc9gwAxtS6tch
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2001 Indigo Rose Corporation
InternalName: setup
FileVersion: 6.0.0.3
CompanyName: Indigo Rose Corporation http://www.indigorose.com
PrivateBuild:
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: This setup code is the property of Indigo Rose Corporation
ProductName: setup
SpecialBuild:
ProductVersion: 6.0.0.3
FileDescription: Setup Factory 6.0 Setup Launcher
OriginalFilename: setup.exe
Translation: 0x0409 0x04e4

TrojanPWS.Crypt also known as:

CMCTrojan-Downloader.Win32.VB!O
CAT-QuickHealTrojanPWS.Crypt
Trapminemalicious.moderate.ml.score
eGambitUnsafe.AI_Score_100%

How to remove TrojanPWS.Crypt?

TrojanPWS.Crypt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment