Trojan:W32/PasswordsPro, PSWTool.Win32.PasswordsPro.q


Trojan:W32/PasswordsPro is a large family of trojans that disguise themselves as password cracker programs


Automatic action

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

Find out more

Knowledge Base

Find the latest advice in our Community Knowledge Base.

User Guide

See the user guide for your product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details

While active, the program silently drops payloads that may consist of additional malware.


When executed, the trojan will drop the following files:

  • %temp%\[random number]setuphelper.exe
  • [random number]%temp%\setup.exe - This is a copy of the malware.

The setuphelper.exefile is a working, clean password cracker program. In addition, numerous additional files, using almost the same name but with differing numbers, will be created. These additional files are malware.[random number]Note that the directory that the dropping occurs to may vary from %temp%.


Additional malicious behavior depends on the specific payloads of the dropped malware.

Date Created: -

Date Last Modified: -