Generic.Application.HackTool.KMS.A.DD98CF7E removal tips

The Generic.Application.HackTool.KMS.A.DD98CF7E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Application.HackTool.KMS.A.DD98CF7E virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Deletes executed files from disk
Anomalous binary characteristics

How to determine Generic.Application.HackTool.KMS.A.DD98CF7E?


File Info:
name: A8DAA37DD4B3128372A0.mlw
path: /opt/CAPEv2/storage/binaries/75bdacd37d89af78167c493ef342573c1bd4f8cfab446aa69d3e7e951e38d758
crc32: A5D5D992
md5: a8daa37dd4b3128372a0c00caebaccd1
sha1: 5cb0d81a19a4381cfe83e6fe14eac6f2795eac87
sha256: 75bdacd37d89af78167c493ef342573c1bd4f8cfab446aa69d3e7e951e38d758
sha512: 5d418837b575609c47458a33a0a5557d8aa92541aaf0a7bf688b76d8edc32d201b01ad4341cbb4cfe49a35d79f11f30e7ed36f937de9adfca810b0affe897bb1
ssdeep: 49152:XF6lyKpPHV6SlcWWssFx6mLR6kqvmUyDsTsq8ybUb:XF6FZHgSlcaOxJCmUT6+Ub
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11BB533127FE4EBF6E8E416B3512B6726053CE618072048D3AF9A8C5E94721E1A77D1E3
sha3_384: 4391d7097903d302a3ce5718af506d2515044fb9127b40f57a91404a0940806d1144b1241b9447486a97def560501fb1
ep_bytes: 558bec6aff68b0924100686065410064
timestamp: 2012-05-28 09:05:05

Version Info:
CompanyName: A3x
FileDescription: A3xChile (x86)
FileVersion: 1.6.0.2496
InternalName: A3xSfxMod
LegalCopyright: (c)2006-2025 A3xChile
OriginalFilename: A3xSfxMod_x86.exe
PrivateBuild: 03.25.2025
ProductName: A3x SFX
ProductVersion: 1.6.0.2496
Translation: 0x0000 0x04b0

Generic.Application.HackTool.KMS.A.DD98CF7E also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Generic.Application.HackTool.KMS.A.DD98CF7E
McAfee	Artemis!A8DAA37DD4B3
VIPRE	Generic.Application.HackTool.KMS.A.DD98CF7E
BitDefender	Generic.Application.HackTool.KMS.A.DD98CF7E
ESET-NOD32	BAT/HackTool.Agent.BA potentially unsafe
Rising	Trojan.Generic@AI.94 (RDML:C7NUvGEg/fxafF+c8xhrpw)
Emsisoft	Generic.Application.HackTool.KMS.A.DD98CF7E (B)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vc
FireEye	Generic.Application.HackTool.KMS.A.DD98CF7E
Sophos	Generic Reputation PUA (PUA)
MAX	malware (ai score=87)
Arcabit	Generic.Application.HackTool.KMS.A.DD98CF7E [many]
GData	Generic.Application.HackTool.KMS.A.DD98CF7E (3x)
ALYac	Generic.Application.HackTool.KMS.A.DD98CF7E
VBA32	Trojan.Wacatac
Cylance	unsafe
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_60% (D)

How to remove Generic.Application.HackTool.KMS.A.DD98CF7E?

Generic.Application.HackTool.KMS.A.DD98CF7E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X