How to remove PasswordScan.exe

PasswordScan.exe

The module PasswordScan.exe has been detected as Virtool.Passview

PasswordScan.exe
Remove PasswordScan.exe

File Details

Product Name:

Password Security Scanner
Company Name:

NirSoft
MD5: f8ada9a3500a912487fd546067729259
Size: 202 KB
First Published: 2017-10-30 19:01:06 (7 years ago)
Latest Published: 2021-01-11 18:30:46 (4 years ago)
Status: Virtool.Passview (on last analysis)
Analysis Date: 2021-01-11 18:30:46 (4 years ago)

Overview

Signed By: Nir Sofer
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%sysdrive%\windows_repair_toolbox\downloads\nirlauncher\nirsoft
%profile%\downloads\nirsoft_package_1.20.19\nirsoft
%profile%\onedrive\downloads\nirsoft launcher\nirsoft_package_enc_1.20.20 1\nirsoft
%profile%\downloads\windows 10 pro x64 rs2 incl office16 sv-se june 2017 {gen2}
%temp%
%profile%\downloads\tech tool store tools\windowsrepairtoolbox\downloads\nirlauncher
%programfiles%\nirsoft_package_enc_1.20.19
%sysdrive%\bin
%sysdrive%\backup free software and keys\backup stuff\tech tool store tools\nirlauncher
%sysdrive%\$recycle.bin\s-1-5-21-3943706205-1530950148-3841408859-1001\$rmpokoe\nirlauncher

File Names:

passwordscan.exe
PasswordScan.exe
A0212732.exe

Geography:

16.6%
9.1%
6.4%
5.9%
5.9%
5.3%
5.3%
5.3%
4.3%
4.3%
3.7%
3.2%
3.2%
2.1%
2.1%
1.6%
1.1%
1.1%
1.1%
1.1%
1.1%
1.1%
1.1%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%

OS Version:

Windows 10 59.5%
Windows 7 32.1%
Windows XP 4.2%
Windows 8.1 3.7%
Windows 8 0.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0005ae20

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 184320 220ccc527f1f22879f8b9a452604a425
.rsrc 10240 18ce1a5c47c624faf0907433738390fb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for PasswordScan.exe
copyright for information about PasswordScan.exe