Malware

How to remove “Win32/Leaktest.PCAudit”?

Malware Removal

The Win32/Leaktest.PCAudit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Leaktest.PCAudit virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Leaktest.PCAudit?


File Info:

crc32: BC84B288
md5: 751b0ef477cf382158f13ddacdc2572c
name: pcaudit.exe
sha1: c89fcfdd2ba664769ee21458f684ac6c12609dba
sha256: 6060a246b81c59c57b659ed6dd7aeca053bd6eaf12a29aad120c0d71c99f36cc
sha512: 3899647e22980991d2bf285799848b4dad323499837b97419c6fbdbe1d6505fe62b5e664a76d72b2e5cb0539592821d7161f3087111f6b8b683c8dd11ef712c2
ssdeep: 1536:B8MFGWh+w2RXPyyMQ1dNA6CowWh5yOiIE3jrFA8Bmkb0IKehGQZlN+cinoi:B8ybhq/yqN9CnpO+JAsfb0ufb/in
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2003
InternalName: pcAuditE
FileVersion: 1, 0, 0, 5
CompanyName: Internet Security Alliance, LLC
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: pcAudit Leak Test
SpecialBuild:
ProductVersion: 6, 3, 0, 0
FileDescription: pcAudit Leak Test demo trojan
OriginalFilename: pcAuditE.exe
Translation: 0x0409 0x0000

Win32/Leaktest.PCAudit also known as:

BkavW32.Clodf4d.Trojan.7b1d
nProtectAbuse-Worry/W32.Pcaudit.99648
CMCGeneric.Win32.751b0ef477!MD
McAfeeSpyware-PCinetpatrol
K7AntiVirusUnwanted-Program ( 00454f261 )
K7GWUnwanted-Program ( 00454f261 )
TheHackerAplicacion/LeakTest.b
SymantecSpyware.Pcaudit
NormanLeakTest.A
TrendMicro-HouseCallTSPY_AGENT
Kasperskynot-a-virus:Monitor.Win32.LeakTest.b
NANO-AntivirusRiskware.Win32.Pcaudit.sxmjc
ComodoApplicUnwnt.Win32.Leaktest.PCAudit
DrWebProgram.Pcaudit
AntiVirSPR/LeakTest.B.3
TrendMicroTSPY_AGENT
McAfee-GW-EditionSpyware-PCinetpatrol
SophosLeakTest
JiangminAdWare/LeakTest.b
Antiy-AVLTrojan[Monitor:not-a-virus]/Win32.LeakTest
KingsoftWin32.Troj.LogTest.xh.(kcloud)
PandaApplication/PcAudit
ESET-NOD32Win32/Leaktest.PCAudit
Ikarusnot-a-virus:Monitor.Win32.LeakTest.b
FortinetRiskware/Pcinetpatrol

How to remove Win32/Leaktest.PCAudit?

Win32/Leaktest.PCAudit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment