Win32/RiskWare.PsShutdown.232 information

The Win32/RiskWare.PsShutdown.232 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/RiskWare.PsShutdown.232 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/RiskWare.PsShutdown.232?


File Info:
crc32: 020232E7
md5: af87f8363814bdbfa7b857abda85cce5
name: AF87F8363814BDBFA7B857ABDA85CCE5.mlw
sha1: 033cf00c0b7db0ef3c56dc6eb4707a032a448b35
sha256: 438da49d453c494eda80733be5cead3465176520aa8de033de23694d5f346b26
sha512: 3d912f01d08224c259a85920b033fac283577bd0eb56599da46d859098c8f465f1b879220789f914045f21a993c29ca2246c32a8fe5b40512fa176330c273290
ssdeep: 1536:HxCSMj7mTFrdFp6B04FS8KvEtMIJ6ahuR2j87HkfGP2Te05eimChkSbuwG6KaeA:gjkNSKEtMIJ6aO2j87HkOPJ3wGVaeSd
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1999-2004 Mark Russinovich
InternalName: PsShutdown
FileVersion: 2.32
CompanyName: Sysinternals - www.sysinternals.com
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: Sysinternals PsShutdown
SpecialBuild: 
ProductVersion: 2.32
FileDescription: Shutdown, logoff and power manage local and remote systems
OriginalFilename: psshutdown.exe
Translation: 0x0409 0x04b0

Win32/RiskWare.PsShutdown.232 also known as:

DrWeb	Tool.Reboot
CAT-QuickHeal	RiskTool.PsShutdown
Cylance	Unsafe
Zillya	Tool.PsShutdown.Win32.3
Alibaba	RiskWare:Win32/PsShutdown.8132a07d
Cyren	W32/Tool.NSQX-9310
ESET-NOD32	Win32/RiskWare.PsShutdown.232
Avast	FileRepMetagen [PUP]
NANO-Antivirus	Riskware.Win32.PsShutdown.hsdk
Comodo	Application.Win32.RiskWare.PsShutdown.232@3aqw
McAfee-GW-Edition	Tool-PsShutdown.a
Jiangmin	RiskTool.PsShutdown.b
Antiy-AVL	Trojan/Generic.ASMalwS.54D8EB
Kingsoft	Win32.RiskWare.PsShutdown.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	not-a-virus:RiskTool.Win32.PsShutdown.232
TACHYON	Abuse-Worry/W32.Reboot.147456
AhnLab-V3	Win-AppCare/PsShutdown.147456
McAfee	Tool-PsShutdown.a
MAX	malware (ai score=65)
Yandex	Trojan.GenAsa!+xkBV7ijVWI
AVG	FileRepMetagen [PUP]

How to remove Win32/RiskWare.PsShutdown.232?

Win32/RiskWare.PsShutdown.232 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/RiskWare.PsShutdown.232 information