Categories: Malware

About “WinGo/PSW.Agent.M” infection

The WinGo/PSW.Agent.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What WinGo/PSW.Agent.M virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine WinGo/PSW.Agent.M?


File Info:
crc32: 31171BB6md5: 24e83aecd38d651f87c6f4fe78b42e3ename: 24E83AECD38D651F87C6F4FE78B42E3E.mlwsha1: 8d6dae3d3859db0a811ceff8df98639e060e7d6dsha256: 40e61c2548308c49a91a232b1e00c49aeb6cc11fde68a99066ef4ed3463610d4sha512: 06550666bce1c819b16b6d572d9fe4e6632404beaec35de7fb5951997ed6c39cc6d969c1902b7e11adb6ea0f058678cc333580eec1c1d4b4fb24c034d8db4546ssdeep: 49152:z6HUGsHNGr11oRM/zKkO9RShOfGIE3XoZy50T/3hpldVTuO/Sd0o6y2:rGZhKyzKhPSwu6y50bhpld5h/Sd0o6ytype: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Version Info:
LegalCopyright:                                                                                                     FileVersion: 2.8.1.0             CompanyName: Telegram FZ-LLC                                             Comments: This installation was built with Inno Setup.ProductName: Telegram Desktop                                            ProductVersion: 2.8.1                                             FileDescription: Telegram Desktop Setup                                      OriginalFileName:                                                   Translation: 0x0000 0x04b0

WinGo/PSW.Agent.M also known as:

Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	VirTool:Win64/Splinter.ab476969
K7GW	Trojan ( 0057d6791 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of WinGo/PSW.Agent.M
APEX	Malicious
Avast	Win64:Trojan-gen
Kaspersky	Trojan-PSW.Win32.Stelega.bsn
BitDefender	Trojan.GenericKD.37269528
MicroWorld-eScan	Trojan.GenericKD.37269528
Ad-Aware	Trojan.GenericKD.37269528
McAfee-GW-Edition	BehavesLike.Win64.Trojan.vc
FireEye	Trojan.GenericKD.37269528
Emsisoft	Trojan.GenericKD.37269528 (B)
Kingsoft	Win32.Troj.Banker.(kcloud)
Microsoft	VirTool:Win64/Splinter.A!MTB
GData	Trojan.GenericKD.37269528
McAfee	Artemis!24E83AECD38D
MAX	malware (ai score=99)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0DGK21
Ikarus	Trojan-PSW.Agent
Fortinet	W32/Agent.M!tr.pws
AVG	Win64:Trojan-gen
Qihoo-360	Win64/Trojan.Generic.HgEASYwA