MSIL/FakeTool.AQI malicious file

The MSIL/FakeTool.AQI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/FakeTool.AQI virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/FakeTool.AQI?


File Info:
crc32: 528D295D
md5: c809a9f667d57a61d22ddce3832a7b3d
name: C809A9F667D57A61D22DDCE3832A7B3D.mlw
sha1: f6f7a8a7ebeb64823b6d5e4a3ff769fe6debaeb1
sha256: dc1e968a2c6ef4faa67286e1d3eb0f5da7278ff558bc09f6f79f5e4c2dbdfa12
sha512: b8e78489c2c82440827176888ec95f04fefdad464ee932af7882401ad4e21bdfde9519298feaa05fbe7b317cdd91a18e483b08e6583c0bbf9365748158916fe3
ssdeep: 12288:LU/uJflIbl7RjMqabQgJrpbU/uJflIbl7RjMqabQgJrU:L8uJfOR41kirl8uJfOR41kir
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 0.0.1.0
InternalName: Bitcoin Adder 2018 Pro - Beta.exe
FileVersion: 1.0.0.0
LegalTrademarks: cybersoftware.inc
ProductName: Bitcoin Adder 2018 Pro - Beta
ProductVersion: 1.0.0.0
FileDescription: Bitcoin Adder 2018 Pro - Beta
OriginalFilename: Bitcoin Adder 2018 Pro - Beta.exe

MSIL/FakeTool.AQI also known as:

K7AntiVirus	Hacktool ( 005112571 )
Lionic	Trojan.Win32.Fake.4!c
Cylance	Unsafe
Zillya	Trojan.FakeTool.Win32.713
Sangfor	PUP.Win32.Johnnie.14998
Alibaba	Trojan:MSIL/FakeTool.364ebf05
K7GW	Hacktool ( 005112571 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/FakeTool.AQI
APEX	Malicious
Avast	Win32:Malware-gen
NANO-Antivirus	Trojan.Win32.FakeTool.eziaic
Tencent	Win32.Trojan.Fake.Swkn
BitDefenderTheta	Gen:NN.ZemsilF.34170.Vr0@aqUiRLl
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXGB-NY!C809A9F667D5
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.A!ml
McAfee	GenericRXGB-NY!C809A9F667D5
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
Yandex	Trojan.FakeTool!/Xxnc0nGkxo
Ikarus	Trojan.MSIL.FakeTool
Fortinet	MSIL/FakeTool.AQI!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/FakeTool.AQI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/FakeTool.AQI malicious file