Crack

HackTool:Win32/Keygen.A removal instruction

Malware Removal

The HackTool:Win32/Keygen.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool:Win32/Keygen.A virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Checks for the presence of known devices from debuggers and forensic tools
  • Anomalous binary characteristics

How to determine HackTool:Win32/Keygen.A?


File Info:

name: 0D66945889BAC999F8B6.mlw
path: /opt/CAPEv2/storage/binaries/156cf661670abe1b0c3fe8fa41889cee6218f78cbfcb8a9e852adee2bdde1875
crc32: C99C1DC2
md5: 0d66945889bac999f8b6508a30078d7e
sha1: 319acbebea86351e78cc3e2cdedf611a140bef38
sha256: 156cf661670abe1b0c3fe8fa41889cee6218f78cbfcb8a9e852adee2bdde1875
sha512: 8d14c6bb88b9bf57b0f410bb7aae82e96b07269191958d42031935e95f98f6251216e578ab532f315274a21c4795a0789016d18982f38422614c070aeb637662
ssdeep: 384:TP009Ur4j9DkdIpRCfwadN0ekeLnW4zV92Wb:zR9U2DkdIqfwaY9eLnVzVg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13472B05BFCA89C84C0284EF61483885F767C2BD05EE972157BDA222F2EB1C7A1294536
sha3_384: fc0b791577c9a7e150690149d7b3d6be2f6fcf446d2b325e278ce52b2c8d092bf4bc204c2fc1f371909d8ab713bf1471
ep_bytes: b8808e40005064ff3500000000648925
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

HackTool:Win32/Keygen.A also known as:

BkavW32.AIDetect.malware1
FireEyeGeneric.mg.0d66945889bac999
McAfeeArtemis!0D66945889BA
CylanceUnsafe
K7AntiVirusUnwanted-Program ( 004d2ecf1 )
K7GWUnwanted-Program ( 004d2ecf1 )
Cybereasonmalicious.bea863
BitDefenderThetaGen:NN.ZexaF.34062.biXfaCshP2c
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Keygen.KL potentially unsafe
Paloaltogeneric.ml
McAfee-GW-EditionBehavesLike.Win32.Virut.lh
SophosMal/Generic-S
GDataWin32.Application.Agent.Z3KYW6
MaxSecureTrojan.Malware.300983.susgen
GridinsoftRansom.Win32.Sabsik.sa
APEXMalicious
MicrosoftHackTool:Win32/Keygen.A
CynetMalicious (score: 100)
Acronissuspicious
MalwarebytesMalware.AI.4171490879
YandexTrojan.GenAsa!GuvosPEiOWc
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_96%
FortinetRiskware/KeyGen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_80% (W)

How to remove HackTool:Win32/Keygen.A?

HackTool:Win32/Keygen.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment