Win32:PSWtool-N [PUP] information

The Win32:PSWtool-N [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:PSWtool-N [PUP] virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32:PSWtool-N [PUP]?


File Info:
name: 9DE5F7BAE54AEF694E83.mlw
path: /opt/CAPEv2/storage/binaries/bce2d33080aa18e61f7c9b7f62fba5602028ee8ae90c158ce5e137b6393a2df8
crc32: 1B176243
md5: 9de5f7bae54aef694e83f787d50db0d0
sha1: e1a2446943300f4acfe4002a1630b965a9120713
sha256: bce2d33080aa18e61f7c9b7f62fba5602028ee8ae90c158ce5e137b6393a2df8
sha512: 8f4d35314011b9655a4fb50a7df15f85496fb6f0f2c16deb4d2de1e5e6b9f3c69afa512e4a4c002aedc986e8ac05d615c1ea8e2e1a9b845a73e9bc65bf368fac
ssdeep: 12288:sLublFG9JTBDZjvfBtGtDEWPOxP79AiZyHpFMv/Fp/UaPpzpJsHQk6L8Vmxm6YHi:TC9Vjvau796MjJPp7sHazxbYH3S
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10825F101B68698B2E16B013597F3EB6A55018921333086CB759CFDCCAFB52D397BD2D2
sha3_384: f070e37bdcd725146d20598e19080f8e2d5a2aaa1fde78edb28217af86c577a716fa1d4698f0cb35416ecdaa845d9306
ep_bytes: bd53ac05abc58737a1b9629cab6b18df
timestamp: 2005-03-29 20:31:10

Version Info:
0: [No Data]

Win32:PSWtool-N [PUP] also known as:

Bkav	W32.AIDetect.malware1
FireEye	Generic.mg.9de5f7bae54aef69
Cylance	Unsafe
K7GW	Hacktool ( 700007861 )
CrowdStrike	win/malicious_confidence_80% (D)
APEX	Malicious
Avast	Win32:PSWtool-N [PUP]
Sophos	ML/PE-A
DrWeb	Program.RemoteAdmin.790
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Rising	Malware.Heuristic!ET#89% (RDMK:cmRtazp0v9qG0V4ZfR5xjCTCvhKU)
SentinelOne	Static AI – Malicious PE
BitDefenderTheta	Gen:NN.ZexaE.34294.9yZ@a4E59jm
AVG	Win32:PSWtool-N [PUP]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Win32:PSWtool-N [PUP]?

Win32:PSWtool-N [PUP] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X