Should I remove “MSIL/HackTool.BruteForce.ACR”?

The MSIL/HackTool.BruteForce.ACR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/HackTool.BruteForce.ACR virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/HackTool.BruteForce.ACR?


File Info:
name: ECB61E4C30B8F778A513.mlw
path: /opt/CAPEv2/storage/binaries/9c23eaada0ca10070c3463ab8cbc1e10c3d69edfa9de03f2f985bad1fb203ed9
crc32: 22D2B057
md5: ecb61e4c30b8f778a513135f8d761c15
sha1: 0617bd2068e6248ab2a9bedc92c8d0abb365d448
sha256: 9c23eaada0ca10070c3463ab8cbc1e10c3d69edfa9de03f2f985bad1fb203ed9
sha512: cba17d5d7f0f63acab8d50c1d5997e7703ebf6c4b34a32cf145958ddfde0de08aadfb1d7e92b79ba30a074db66bb3a125140122d035893ff5a5aa517a8c39188
ssdeep: 6144:ab8Q524ew6SniGBdbAKYLA6LwCR6e0iFJqLeCYtn9Kq:i8Q5Vew6mikFuLAK3y6H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4A449819272EA8ED43BC33CC152D5772DA61FB93D42E66D6884720AF976F03150FA4E
sha3_384: 715f9e48b32ad22053684395abdf3a8ce77a355098c1c6960c85056c20a59509d36e812cf5bb17f20e44879a12f3a96b
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-10-23 00:20:38

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsApplication1
FileVersion: 1.0.0.0
InternalName: WindowsApplication1.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: WindowsApplication1.exe
ProductName: WindowsApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/HackTool.BruteForce.ACR also known as:

Lionic	Trojan.Win32.Perseus.4!c
McAfee	Artemis!ECB61E4C30B8
Zillya	Tool.BruteForce.Win32.5163
CrowdStrike	win/malicious_confidence_60% (W)
ESET-NOD32	a variant of MSIL/HackTool.BruteForce.ACR
APEX	Malicious
Paloalto	generic.ml
Alibaba	Trojan:MSIL/Generic.40970f3f
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.MSILPerseus.89953 (B)
VIPRE	Trojan.Win32.Generic!BT
Ikarus	Trojan.Dropper
Arcabit	Trojan.MSILPerseus.D15F61
AhnLab-V3	Trojan/Win32.Cryptos.C309835
TACHYON	Trojan/W32.DN-Agent.477184.M
SentinelOne	Static AI – Malicious PE
AVG	Win32:Malware-gen

How to remove MSIL/HackTool.BruteForce.ACR?

MSIL/HackTool.BruteForce.ACR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X