HackTool:Win32/KerBrute!MSR removal guide

The HackTool:Win32/KerBrute!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/KerBrute!MSR virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine HackTool:Win32/KerBrute!MSR?


File Info:
name: F502AD2FA88E872169DF.mlw
path: /opt/CAPEv2/storage/binaries/5aa035ebc3359ee8517d99569c8881fcb7f48ab7e9a2f101f7e7ec23e636c79b
crc32: 79CFFB96
md5: f502ad2fa88e872169df51790e946440
sha1: 84caf1ce68a7be9f80273e0cca471c9fd01aee29
sha256: 5aa035ebc3359ee8517d99569c8881fcb7f48ab7e9a2f101f7e7ec23e636c79b
sha512: 5f821176b7b7f1d64f840c3d3e7a5dff2f8b69a89f466373fb49c5707643bde0ca15a6e0f68869ffd421aef41e95d386e7c81ba2063885fcc25896b5c47b41a1
ssdeep: 98304:V4I9XZyzw5raL+7Z2KKE0yIsVGh8G1xJ2dobIx2cGWlDdy:GINZyzyxAKB0yIsVGzJVIYfW
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T175668D40E9EF60F6EF43563088A7622F773061098739DEC7C6541E67F8276E20AB7265
sha3_384: c97acf0ea2f23c268609435a3e3caf9baddb5ea4b0847eb829e78ced85efb6f4adc0ed3d63a0fddeca0238867294959d
ep_bytes: e92bd9ffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

HackTool:Win32/KerBrute!MSR also known as:

Bkav	W32.Common.DB3E1292
Lionic	Hacktool.Win32.Kerbrute.3!c
DrWeb	Tool.Kerbrute.1
MicroWorld-eScan	Application.Kerbrute.B
FireEye	Application.Kerbrute.B
Skyhigh	Generic pup.cpe
McAfee	Generic pup.cpe
Cylance	unsafe
Zillya	Tool.Agent.Win32.114078
K7AntiVirus	Trojan ( 005a4e9b1 )
Alibaba	HackTool:Win32/Generic.36382f06
K7GW	Trojan ( 005a4e9b1 )
Arcabit	Application.Kerbrute.B
Symantec	Hacktool
ESET-NOD32	a variant of WinGo/HackTool.Agent.AC
Kaspersky	HEUR:HackTool.Win32.Kerbrut.gen
BitDefender	Application.Kerbrute.B
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.13b4cdc6
Sophos	Generic Reputation PUA (PUA)
Google	Detected
F-Secure	Trojan.TR/Redcap.xqomb
VIPRE	Application.Kerbrute.B
Emsisoft	Application.Kerbrute.B (B)
Jiangmin	HackTool.Convagent.ap
Varist	W32/ABApplication.YFPK-1928
Avira	TR/Redcap.xqomb
MAX	malware (ai score=74)
Antiy-AVL	Trojan/Win32.Agent
Microsoft	HackTool:Win32/KerBrute!MSR
ZoneAlarm	HEUR:HackTool.Win32.Kerbrut.gen
GData	Application.Kerbrute.B
Cynet	Malicious (score: 99)
AhnLab-V3	HackTool/Win.Agent.C5411292
ALYac	Application.Kerbrute.B
Malwarebytes	Generic.Malware/Suspicious
Panda	PUP/Hacktool
Rising	Hacktool.Agent!8.335 (CLOUD)
Fortinet	Riskware/Kerbrut
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove HackTool:Win32/KerBrute!MSR?

HackTool:Win32/KerBrute!MSR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X