05-14-2026, 02:12 AM
In version SIW 2026 v16.06.0513, Eset detects PWDump. Looks like they forgot their agreement not to flag SIW!
PWdump detected by AV
05-14-2026, 02:22 AM
Sorry, didn't include Eset log info. (I slightly edited extraneous/identifying info).
\SIW\siw64.exe;a variant of Win64/HackTool.PSWDump.T trojan;retained;Event occurred on a file modified by the application: C:\Windows\System32\Robocopy.exe
Also when running password module.
\SIW\siw64.exe;a variant of Win64/HackTool.PSWDump.T trojan;retained;Event occurred on a file modified by the application: C:\Windows\System32\Robocopy.exe
Also when running password module.
05-14-2026, 06:22 AM
(05-14-2026 02:22 AM)dcm Wrote: Sorry, didn't include Eset log info. (I slightly edited extraneous/identifying info).
\SIW\siw64.exe;a variant of Win64/HackTool.PSWDump.T trojan;retained;Event occurred on a file modified by the application: C:\Windows\System32\Robocopy.exe
Also when running password module.
https://www.gtopala.com/forum/Thread-Why...s-SIW-as-Y
« Next Oldest | Next Newest »
Users browsing this thread: 1 Guest(s)