Trojan:W32/PasswordsPro

Classification

Malware

Trojan

W32

Trojan:W32/PasswordsPro, PSWTool.Win32.PasswordsPro.q

Summary

Trojan:W32/PasswordsPro is a large family of trojans that disguise themselves as password cracker programs

Removal

Automatic action

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

Find out more

Knowledge Base

Find the latest advice in our Community Knowledge Base.

User Guide

See the user guide for your product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details

While active, the program silently drops payloads that may consist of additional malware.

Installation

When executed, the trojan will drop the following files:

  • %temp%\[random number]setuphelper.exe
  • [random number]%temp%\setup.exe - This is a copy of the malware.

The setuphelper.exefile is a working, clean password cracker program. In addition, numerous additional files, using almost the same name but with differing numbers, will be created. These additional files are malware.[random number]Note that the directory that the dropping occurs to may vary from %temp%.

Activity

Additional malicious behavior depends on the specific payloads of the dropped malware.

Date Created: -

Date Last Modified: -