How to remove “HackTool.Xray”?

The HackTool.Xray is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool.Xray virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine HackTool.Xray?


File Info:
name: A360DEC0FEBB2F5DE574.mlw
path: /opt/CAPEv2/storage/binaries/b17fe7a0010163aae29fa714d0ec8954281b6475584a5bc1bad46365b95aaeeb
crc32: 1BAE741C
md5: a360dec0febb2f5de574ce3c3d57fa11
sha1: c3f474f206f2f795e716ccc05760fe98b963169b
sha256: b17fe7a0010163aae29fa714d0ec8954281b6475584a5bc1bad46365b95aaeeb
sha512: 9b0e686d48bd4211e4a04f4adce24e0c20446bc088f388fdfedc538b3de8e0ac2e362f9b24955106ab0393c9817cf9212238030d5f176337458b6562483b668d
ssdeep: 3072:b5rzVqlSoay6fWZhqWJsN4wEPosdMTwud0:bjuSomfWZf8Twu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDE38D1279F1C8F6C29601300EA1ABBB73B9ED740B618E93F3509B5E5C365D05E2B267
sha3_384: 0cb5efed23db3a613be4c9cbf2f9f0c5fe73c578e43c1d6c2a4bbc3a1cc19b2512cdbc6a28db568b24d34b53b891cf28
ep_bytes: 558bec6aff6898ad4100688859400064
timestamp: 2002-03-15 02:11:17

Version Info:
Comments: 
CompanyName: 
FileDescription: Xray Microsoft 基础类应用程序
FileVersion: 1, 0, 0, 1
InternalName: Xray
LegalCopyright: 版权所有 (C) 2002
LegalTrademarks: 
OriginalFilename: Xray.EXE
PrivateBuild: 
ProductName: Xray 应用程序
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0804 0x04b0

HackTool.Xray also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Generic.XPL.IIS.25827808
Skyhigh	BehavesLike.Win32.BadFile.cm
McAfee	Artemis!A360DEC0FEBB
Malwarebytes	HackTool.Xray
Arcabit	Generic.XPL.IIS.D18A19E0
Elastic	malicious (high confidence)
BitDefender	Generic.XPL.IIS.25827808
Emsisoft	Generic.XPL.IIS.25827808 (B)
VIPRE	Generic.XPL.IIS.25827808
FireEye	Generic.XPL.IIS.25827808
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Agent
Kingsoft	malware.kb.a.950
GData	Generic.XPL.IIS.25827808
ALYac	Generic.XPL.IIS.25827808
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09EP23
Rising	Trojan.Win32.Generic.15957355 (C64:YzY0OveHfdrVaaPS)
MaxSecure	Trojan.Malware.219936099.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove HackTool.Xray?

HackTool.Xray removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X