HackTool:Win32/RemoteAdmin removal instruction

The HackTool:Win32/RemoteAdmin is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/RemoteAdmin virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Unconventionial language used in binary resources: Chinese
Anomalous binary characteristics

How to determine HackTool:Win32/RemoteAdmin?


File Info:
crc32: 16064A61
md5: 8b304eb719e976ea9dd4e1f8367de0b0
name: 8B304EB719E976EA9DD4E1F8367DE0B0.mlw
sha1: 56452df3e9757d90f7fc83e9bad8efe14767ecca
sha256: a4c4c0fc6f6c8ea89aa39d6a974ab3009284b6d29db013274828af51b1cdfad8
sha512: 228c3fd4410da7d9075d0f5687bff6d1b29573981d1de623130e9a2e65885a1f43569fd35be4dcad02ddb21a5910737f3b8c8d939553ded8f44d1ae64fb95706
ssdeep: 384:Bi3aNu94p4kfzjrl/sT8PUmN16jfoUx/KULigYBktIFU8xTiUfXDe:M3aawD7fLPw90RCIVxiuXDe
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2007-2010 Famatech Fan Club
FileVersion: 2.3.0.0
CompanyName: Famatech Fan Club
ProductName: NTS
ProductVersion: 2.3.0.0
FileDescription: Famatech Radmin Server Expansion
Translation: 0x0004 0x03a8

HackTool:Win32/RemoteAdmin also known as:

Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	RiskWare:Win32/RAdmin.d2ca38da
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Avast	FileRepMalware
Kaspersky	not-a-virus:RemoteAdmin.Win32.RAdmin.wk
NANO-Antivirus	Riskware.Win32.RemoteAdmin.fqwczq
ViRobot	Adware.Agent.31744.M
Sophos	Generic PUA FG (PUA)
McAfee-GW-Edition	BehavesLike.Win32.PUP.nm
FireEye	Generic.mg.8b304eb719e976ea
Microsoft	HackTool:Win32/RemoteAdmin
Gridinsoft	Trojan.Win32.Agent.dg
AegisLab	Riskware.Win32.RAdmin.1!c
ZoneAlarm	not-a-virus:RemoteAdmin.Win32.RAdmin.wk
McAfee	Artemis!8B304EB719E9
Rising	Malware.Heuristic!ET#77% (RDMK:cmRtazpU+9LvgK5oQl7SHTYHwiaq)
Fortinet	Riskware/RAdmin
AVG	FileRepMalware

How to remove HackTool:Win32/RemoteAdmin?

HackTool:Win32/RemoteAdmin removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X