Win32/Spy.Swisyn.AE removal tips

The Win32/Spy.Swisyn.AE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Spy.Swisyn.AE virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Spy.Swisyn.AE?


File Info:
name: 0E338DF571B3CFAD31B2.mlw
path: /opt/CAPEv2/storage/binaries/813f4bfa377f3c218031441b9cc735ec42504b2f0d3caa067b8b5b5adc06f978
crc32: 0EC35ED4
md5: 0e338df571b3cfad31b2dd7c86694685
sha1: 6ec8341b66d1acdbf96d92895f4ad58a598b1300
sha256: 813f4bfa377f3c218031441b9cc735ec42504b2f0d3caa067b8b5b5adc06f978
sha512: 15ec4cc861165102b64578299ccb47c024d353a1d09a67f9c99c2d11be23c12976c99fa9de898c8618378517755d037759c1ccf2e82415b04ea7580527173831
ssdeep: 6144:shrEWbGXHEI/5x3swMoa3UtPqOk4NNhMXJA/o2xNvp0uNghgB6IXojB/c86UjC64:iEKGXHEIH/xxNvMXIXNgu6A+/c8HCQW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6A49F33F2E14537D263267C9C2B976D9D36BF103968684A6BE81D0C5F3D281793A293
sha3_384: 247467a9c97aba05bd0e3d8e83bbf8c4918b2b0ad2c8a2f13fc90f76c8bd3d5ef9bed70b6fec76572bf0ecf1d052bd36
ep_bytes: 558becb90b0000006a006a004975f951
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Win32/Spy.Swisyn.AE also known as:

MicroWorld-eScan	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg
FireEye	Generic.mg.0e338df571b3cfad
ALYac	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg
Zillya	Trojan.Swisyn.Win32.4542
K7AntiVirus	Trojan ( 7000000f1 )
K7GW	Trojan ( 7000000f1 )
Cyren	W32/Risk.CVRV-5412
ESET-NOD32	a variant of Win32/Spy.Swisyn.AE
APEX	Malicious
BitDefender	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg
Avast	Win32:Bredolab-DB [Trj]
Tencent	Malware.Win32.Gencirc.11c737ce
Ad-Aware	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg
Emsisoft	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg (B)
DrWeb	Trojan.KeyLogger.20367
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	TSPY_SWIZYN.SMF
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Sophos	Generic ML PUA (PUA)
Ikarus	Backdoor.Win32.Yobdam
GData	Gen:Heur.Mint.Porcupine.CGW@bOwwIqoOg
Jiangmin	Trojan/Swisyn.flq
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASMalwS.6DB1
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Swisyn.R435085
McAfee	Generic Dropper.amg
VBA32	TrojanSpy.KeyLogger
Malwarebytes	Malware.AI.1244054842
TrendMicro-HouseCall	TSPY_SWIZYN.SMF
Rising	Trojan.Generic@ML.86 (RDML:/TMK2Y/SBBNqPmsL/0m2WQ)
Yandex	Trojan.GenAsa!fSIl632StYk
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Swisyn.AL!tr
AVG	Win32:Bredolab-DB [Trj]
Panda	Generic Malware

How to remove Win32/Spy.Swisyn.AE?

Win32/Spy.Swisyn.AE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X