Threat Description

Trojan-PSW

Details

Aliases: Trojan-PSW
Category: Malware
Type: Trojan-PSW
Platform: W32

Summary


This type of trojan steals passwords and other sensitive information. It may also secretly install other malicious programs.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.


Suspect A False Alarm?

If you suspect a file has been incorrectly identified as malicious, (that is, it is a False Alarm or a False Positive), please first ensure your F-Secure security program is up-to-date with the latest detection database updates, then rescan the suspect file.

If you continue to suspect a False Alarm, you may submit a sample of the suspect file to our Security Labs for further analysis via the Sample Analysis System (SAS).






Technical Details


A Trojan-PSW is very similar to a Trojan-Spy, but is geared mainly towards stealing account log-in details, including passwords (the PSW stands for password stealer). In addition, some Trojan-PSW may also include spying and data-stealing routines.

To perform its password-stealing routine, a Trojan-PSW will usually drop a keylogging component. Such components stays active in Windows memory and starts keylogging (recording keystrokes) when a user is asked to input a log-in ID and a password. Stolen log-ins and passwords can allow an attacker to read a user's e-mail on public and corporate mail servers, as well as giving access to more sensitive material, such as online banking accounts.

Note

As of March 2010, the naming convention 'Trojan-PSW' has been updated to 'Trojan-PWS' to make identification easier for users and to ensure naming practices are in line with current industry standards.



SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More