HackTool.Agent.Nirsoft removal instruction

The HackTool.Agent.Nirsoft is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What HackTool.Agent.Nirsoft virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Hebrew
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine HackTool.Agent.Nirsoft?


File Info:
crc32: C6AB469A
md5: 0dc94c37c5a25cfb0b8c6608db7ec636
name: ProduKey.exe
sha1: 5251fd3c7b19f38967900e27e3455ca46f10a773
sha256: 3e9e2bb3a752a20d0729d5b9e5dccef821b3cc3d8b47da927be87c38ef5d0a30
sha512: ed22bb3fef5499eecff8c53368656362c33382e95db05614872e5cf19c83c0cfcafb1cf672d4ded2b999881e5d0069c7d53be7c34a33f88671fb42bf1c564922
ssdeep: 1536:KgOzQaZYYYaTky0zMZhyl83oCpneMtKAM3to2GyekteebiJ:KNMY750CylooyUTGyeklO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2005 - 2018 Nir Sofer
FileVersion: 1.92
CompanyName: NirSoft
ProductName:  ProduKey 
ProductVersion: 1.92
FileDescription: Shows Windows/Office product keys stored in the Registry
Translation: 0x0409 0x04b0

HackTool.Agent.Nirsoft also known as:

Cylance	Unsafe
VIPRE	Nirsoft Password Recovery (not malicious)
TrendMicro	HackTool.Win32.ProduKey.SM
Symantec	Hacktool.ProduKey
TrendMicro-HouseCall	HackTool.Win32.ProduKey.SM
ClamAV	Win.Trojan.Agent-6482032-0
GData	Win32.Application.Agent.6TF01E
Kaspersky	not-a-virus:PSWTool.Win32.ProductKey.vjr
Alibaba	RiskWare:Win32/ProductKey.0ded06fa
AegisLab	Riskware.Win32.ProductKey.1!c
Comodo	ApplicUnwnt@#3efng4tzuitj6
DrWeb	Tool.ProductKey.3
Zillya	Tool.ProductKey.Win32.283
Invincea	heuristic
McAfee-GW-Edition	Tool-PassView.b
Sophos	NirSoft ProduKey (PUA)
Endgame	malicious (high confidence)
Arcabit	Application.Nirsoft
ZoneAlarm	not-a-virus:PSWTool.Win32.ProductKey.vjr
Microsoft	PUA:Win32/Presenoker
McAfee	Tool-PassView.b
Malwarebytes	HackTool.Agent.Nirsoft
Zoner	Trojan.Win32.64914
ESET-NOD32	a variant of Win32/PSWTool.ProductKey potentially unsafe
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/ProductKey
MaxSecure	Trojan.Malware.74026422.susgen

How to remove HackTool.Agent.Nirsoft?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

HackTool.Agent.Nirsoft removal instruction