PSW.MailPassView - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / PSW.MailPassView

PSW.MailPassView Technical Details

Category

PSW

Discovered

3/12/2008 17:27:00 PM

Modified

6/16/2008 17:56:00 PM

Threat Level

Critical

Description

This family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords.

Summary

The hosts file was updated with the following url-to-ip mappings:
127.0.0.1 www.
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established:
68.178.211.72:1610(winhostecn72.prod.mesa1.secureserver.net)

When the PSW is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\mail passview\mailpv.exe	1.3.8.142	nirsoft	26bb6fdb944db55feeb3c9ed81f9c5bb	50176
..\0d15b065.exe	1.3.4.138	nirsoft	7fefc7fe85ebc66fb9e6888a489f8aac	44032
..\1f5ff9bd.exe	1.3.5.139	nirsoft	22f14cfd15685d4f5155d73f825b8425	45056
..\3f5e830e.exe	1.3.5.139	nirsoft	a054e7f66a09f4798dfa8e8f9eb055f8	82432
..\8ce1c52a.exe	1.3.0.131	NirSoft	06b633cb62dfe7120224dc0ef786b2c0	96256
..\9e136242.exe	1.2.1.114	nirsoft	3070fd5a146e767fc5be8550e7d2d50a	93281
..\d4406202.exe	1.3.5.139	ficknudel	caf2463d77a2da2a7cd5e623ed9a75d1	82432
..\e4bf2538.exe	1.3.7.141	nirsoft	62ce35db0c067c96368f270a044f260f	46080
..\e98b70be.exe	1.3.6.140	nirsoft	aeaf4c30722cc779448adf1831ec5790	45056
..\1d5406da.exe	1.3.1.132	nirsoft	c9bf0c1413a46c4c60a5e1106e7d1f10	96256
..\a3ab91e1.exe	1.2.1.114	NirSoft	f568d61b68ed83b7d751f3da38f11c2a	79449
..\d467dcee.exe	1.4.0.145	NirSoft	fab22b5b6553dd063ca24b17d547cba4	93696
..\f0628a2b.exe	1.4.1.146	NirSoft	2e00d7e85e4bff9de8619cd604f3ff5f	50176
..\e5b86bd7.exe			9a954eba79605ef925b76fbb95a66a7e	102064
..\039c10b7.exe	1.0.0.0	NirSoft	2cb3818892d1c9cb8b5c12879b7aaa14	34816
..\18a8ab44.exe	1.1.3.0	NirSoft	ae7816f43302b9338225b0f0f77b5dca	17920
..\1a40fe4a.exe	1.1.3.0	nirsoft	fedde93783f1e8f0c2080c7bbeed95f1	49664
..\486c1a6e.exe			26d501f79f27471917c0d3cfe5c057bc	37421
..\5f34806c.exe			30770d50e63723821156c77642a8ed08	12532
..\6f0fe696.exe			01d545874e26d673f3a3dfd1591ab8fb	50252
..\aa174bd1.exe			7c4ebde9f3dae4a8b0ae444e159a6a1f	50176
..\ad4b04f5.exe			56a23d7592f681b9eba6c4626d0d72f6	13996
..\bb7ad033.exe			2be066f3e65ea3c22bf94dae54133226	12384
..\d82de75c.exe			b5d71444af23465b7dff300a9debeddf	77976
..\d92a7d2a.exe			686a0888d79079a9452204322ac75d65	38048

When the PSW is executed, it creates the following Registry entries:

Recommendation to remove PSW.MailPassView

Spyware Detector can remove PSW.MailPassView, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat