Win32/Spy.PCAcme.AA potentially unsafe removal instruction

The Win32/Spy.PCAcme.AA potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Spy.PCAcme.AA potentially unsafe virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Spy.PCAcme.AA potentially unsafe?


File Info:
name: 548F4428D46CD0FC7010.mlw
path: /opt/CAPEv2/storage/binaries/8c15511f284417ca854c49c29aa4de122bff9577e488619fac19a0ff7c17bbab
crc32: 5E6C3819
md5: 548f4428d46cd0fc701083e680f63582
sha1: 06d0c9623be5ae100fd4c0fe4ccf8b289af3488b
sha256: 8c15511f284417ca854c49c29aa4de122bff9577e488619fac19a0ff7c17bbab
sha512: 244217e60c75ea5deaf2bcf896c0395d4ad5e2c6341e2eeda0ed714ce03d76478024b8ca2547f5a43198985b39ade012f0bf96c2de19cedbf629ec4847f86c3b
ssdeep: 3072:SMDDkbI41qGfuwEpaPhJiu9upcvqOLLisgk5XRrViJJTTGNIHpGLtE:SMDDkR9GwXi7p6gGJmhi0pGW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E8444B00A9808435F49140798266C7375A69FD347B55FDE7A7C06EAA4D782F3FB32B0A
sha3_384: b80262248218cf49cb92f49d6a3ff02fe0ed2980a5630c6edd826a93f097c7128d27dde97a314f5eb89a73f354541c3d
ep_bytes: e865a50000e916feffffcccccccccccc
timestamp: 2008-08-20 13:48:59

Version Info:
0: [No Data]

Win32/Spy.PCAcme.AA potentially unsafe also known as:

Lionic	Trojan.Win32.Agent.4!c
FireEye	Generic.mg.548f4428d46cd0fc
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
K7AntiVirus	Trojan ( 002fbbd01 )
K7GW	Trojan ( 002fbbd01 )
Cybereason	malicious.23be5a
VirIT	Trojan.Win32.Agent2.AZTD
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.PCAcme.AA potentially unsafe
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Sdbot.cwbnvb
ViRobot	Trojan.Win32.A.Agent.253952.C
Avast	Win32:Rootkit-gen [Rtk]
Comodo	Malware@#2b81cmjhsjeck
DrWeb	BackDoor.IRC.Sdbot.16526
Zillya	Trojan.Agent.Win32.233133
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.dh
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.AO8K8N
Jiangmin	Trojan/Agent.dtqx
Webroot	System.Monitor.Activity.Monitor
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!548F4428D46C
Malwarebytes	Malware.Heuristic.1001
TrendMicro-HouseCall	TROJ_GEN.R002H0CFJ22
Rising	Spyware.PCAcme!8.30F8 (CLOUD)
Yandex	TrojanSpy.PCAcme!Mnr2dw0DA2M
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Dx.YDR!tr
BitDefenderTheta	Gen:NN.ZexaF.34742.pqW@aSASHqp
AVG	Win32:Rootkit-gen [Rtk]
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Win32/Spy.PCAcme.AA potentially unsafe?

Win32/Spy.PCAcme.AA potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X