HackTool:Win64/UACMe.A!MSR removal guide

The HackTool:Win64/UACMe.A!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win64/UACMe.A!MSR virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine HackTool:Win64/UACMe.A!MSR?


File Info:
crc32: E0E90DE8
md5: d29b78d7c1fe84baa3db42293c3a92c8
name: D29B78D7C1FE84BAA3DB42293C3A92C8.mlw
sha1: d9558a62f10896c4526191013a8197ab6733a983
sha256: 859253d89cb8d0f9df2a18222f9936b9e25ac48b6fca4cef00c145ab8b4788cd
sha512: 96d120ee72891dfecced3809d2d49a91b11597b8affc2b2e57cfc767eef02164481a9798371bedd9f5457e8b764f7dc75bfaae1b8d0aceff618825e622ea84de
ssdeep: 3072:dqeHKDIMC6ixwaJpxVqK73gjs9ZM3OVCMesxCW1Doo8dqhc:dqeUCpwaJsK7A+zCQ0Zdqa
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9  2014 - 2020 Hazardous Environments
InternalName: Akagi
FileVersion: 3.2.6.2005
CompanyName: Hazardous Environments
ProductName: UACMe
ProductVersion: 3.2.6.2005
FileDescription: UACMe main module
OriginalFilename: Akagi.exe
Translation: 0x0409 0x04b0

HackTool:Win64/UACMe.A!MSR also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
McAfee	Artemis!D29B78D7C1FE
Cylance	Unsafe
AegisLab	Hacktool.Win32.UAC.3!c
BitDefender	Gen:Variant.Fugrafa.13599
Arcabit	Trojan.Fugrafa.D351F
Symantec	Hacktool.Uacbypass!g1
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Exploit.Win32.UAC.vho
Alibaba	HackTool:Win64/UACMe.8cbc0290
MicroWorld-eScan	Gen:Variant.Fugrafa.13599
Tencent	Malware.Win32.Gencirc.11a47c30
Ad-Aware	Gen:Variant.Fugrafa.13599
Sophos	Generic PUA NJ (PUA)
F-Secure	Heuristic.HEUR/AGEN.1110888
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.d29b78d7c1fe84ba
Emsisoft	Gen:Variant.Fugrafa.13599 (B)
Ikarus	PUA.Generic
Jiangmin	Exploit.UAC.lo
Avira	HEUR/AGEN.1110888
Antiy-AVL	Trojan[Exploit]/Win32.UAC
Microsoft	HackTool:Win64/UACMe.A!MSR
ZoneAlarm	HEUR:Exploit.Win32.UAC.vho
GData	Gen:Variant.Fugrafa.13599
AhnLab-V3	HackTool/Win64.UACMe.R351549
ALYac	Gen:Variant.Fugrafa.13599
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1003660081
Panda	Trj/CI.A
ESET-NOD32	a variant of Win64/HackTool.UACMe.G
Rising	Exploit.Uacbypass!1.CE04 (CLASSIC)
Yandex	Riskware.UACMe!wLdaLVyhY0E
AVG	Win64:HacktoolX-gen [Trj]
Cybereason	malicious.7c1fe8
Avast	Win64:HacktoolX-gen [Trj]

How to remove HackTool:Win64/UACMe.A!MSR?

HackTool:Win64/UACMe.A!MSR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X