What is “HackTool:Win32/Keygen!pz”?

The HackTool:Win32/Keygen!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/Keygen!pz virus can do?

Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine HackTool:Win32/Keygen!pz?


File Info:
name: 5086E75BB66E6964E424.mlw
path: /opt/CAPEv2/storage/binaries/7ff79e23af9842583660c1fba7a7c6677e97edd18c6f95179da13f064f62b80d
crc32: EC5E3E77
md5: 5086e75bb66e6964e42424178229f170
sha1: c8ec535da0908bd45c78df1aa846dd63dd79c81d
sha256: 7ff79e23af9842583660c1fba7a7c6677e97edd18c6f95179da13f064f62b80d
sha512: e27fcc6468e68355a364ae41aa6c84a476c6280ba4e7cbfe1a54850a6680a497450e17db2812461f8dcb6e3bcbb25178d980f3603eb9d84006ca5796bd707bb8
ssdeep: 1536:+MkpHNiTjVcIXPHltF9DaPPPPt/1lxC+oU0ODbWR:+MkJNoVcIXPHltF9D4PPPt/1lxC+oU0f
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10E43F8197D97827DC39017312CA59E608678AF31E7A0E0479F7C1E2C2F61562EA1FE72
sha3_384: 660438867d98896755283f636866b7e199ed4217b02f28701ed8b475d5daee35a0b9ee8e505bea725ae3224a1d2f5375
ep_bytes: 558bec81c400fcffff837d0c01750bff
timestamp: 2012-03-05 17:19:27

Version Info:
0: [No Data]

HackTool:Win32/Keygen!pz also known as:

Lionic	Trojan.Multi.Generic.luwn
DrWeb	Tool.ProcPatch.269
ClamAV	Win.Tool.Patcher-9780678-0
FireEye	Generic.mg.5086e75bb66e6964
CAT-QuickHeal	Riskware.Dupatcher.A4
Skyhigh	BehavesLike.Win32.Generic.qh
McAfee	PUP-XEO-IJ
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (W)
K7GW	Hacktool ( 000117241 )
K7AntiVirus	Hacktool ( 000117241 )
BitDefenderTheta	Gen:NN.ZedlaF.36744.du4@aSSRFX
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/HackTool.Patcher.T potentially unsafe
Cynet	Malicious (score: 100)
SUPERAntiSpyware	HackTool/Gen-Keygen
Sophos	Generic Patcher (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.ggym
Webroot	W32.Malware.Gen
Google	Detected
Antiy-AVL	HackTool/Win32.Patcher
Kingsoft	malware.kb.a.825
Xcitium	Malware@#1u3db7tytvq
Microsoft	HackTool:Win32/Keygen!pz
GData	Win32.Riskware.Hacktool.L
AhnLab-V3	HackTool/Win32.Patcher.R207239
MAX	malware (ai score=99)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Rising	Trojan.Generic@AI.100 (RDMK:EUyDZ+etBMczKcXOUFCGuQ)
Yandex	Trojan.GenAsa!LQ3DV0CmSBI
Ikarus	PUA.HackTool.Patcher
Fortinet	Riskware/Patcher
DeepInstinct	MALICIOUS

How to remove HackTool:Win32/Keygen!pz?

HackTool:Win32/Keygen!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X