Trojan

UDS:Trojan-PSW.Win32.Reline removal guide

Malware Removal

The UDS:Trojan-PSW.Win32.Reline is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What UDS:Trojan-PSW.Win32.Reline virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine UDS:Trojan-PSW.Win32.Reline?


File Info:

crc32: 7A44790F
md5: 2a912094990f0e2d815c6171aa612f4a
name: 2A912094990F0E2D815C6171AA612F4A.mlw
sha1: b875420a6aacf80a4568478a359d4e35e3625d13
sha256: 27fb768ba20cf770d9bdc62e1403196784c903333235e0293b398df7647119f6
sha512: 7951ce1e0c705262329114aa20c25ac10958a1bb558b648d538d3ee815cbdec1145f7447268d23bf103a53f1c2acfe65f320f864103cfec5820f5656b54de79f
ssdeep: 3072:JHZAbkkww09b8Vfl9G7iwSFqE0p0fKVHo6cCgkbUfhgePfW0PQtWZRKZMzNrjKT:J5At+9o5l9GXSFp0lSUAPfWIafZMzdc
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

InternalName: sagzmeoleke.iwi
ProductVersion: 7.51.22.123
Copyright: Copyrighz (C) 2021, fudkageta
Translation: 0x0122 0x003a

UDS:Trojan-PSW.Win32.Reline also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0056f9be1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0056f9be1 )
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMetagen [Malware]
KasperskyUDS:Trojan-PSW.Win32.Reline.gen
SophosML/PE-A + Troj/Krypt-W
BitDefenderThetaGen:NN.ZexaF.34088.pq0@aOa3!Xbi
TrendMicroMal_HPGen-50
McAfee-GW-EditionBehavesLike.Win32.Emotet.dc
FireEyeGeneric.mg.2a912094990f0e2d
EmsisoftTrojan.Agent (A)
SentinelOneStatic AI – Suspicious PE
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftTrojan.Win32.Packed.lu!heur
Acronissuspicious
McAfeeArtemis!2A912094990F
VBA32BScope.Trojan.Glupteba
MalwarebytesTrojan.MalPack.GS
TrendMicro-HouseCallMal_HPGen-50
MaxSecureTrojan.Malware.300983.susgen
AVGFileRepMetagen [Malware]
Qihoo-360HEUR/QVM10.1.5AC7.Malware.Gen

How to remove UDS:Trojan-PSW.Win32.Reline?

UDS:Trojan-PSW.Win32.Reline removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment