MSIL/HackTool.BruteForce.KH removal

The MSIL/HackTool.BruteForce.KH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/HackTool.BruteForce.KH virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/HackTool.BruteForce.KH?


File Info:
name: 3E222887174140A5635E.mlw
path: /opt/CAPEv2/storage/binaries/72c5d2d6858b152f1d836eb1a7247d78a8457cae27b6a04d590dc901579ef66b
crc32: 5CC27C92
md5: 3e222887174140a5635e8f5350e8e456
sha1: 154a6ddfeb9b97bce139ef88efbb55b1120adbc6
sha256: 72c5d2d6858b152f1d836eb1a7247d78a8457cae27b6a04d590dc901579ef66b
sha512: cbe13e29c54e6724a03b24e4f535fb117471a4a102fcadf06f21fd48fc2474afcd5f5ce22f7971119e909017669e188a17702202356dddd080c4097f6d9dfa9e
ssdeep: 3072:zmXQH7KcouqOXp6MXCxqKrAiln6lkx0TfW7B5for:tKcowXxSqKXlv0r8B5fo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FF3BE5233B45A37EE751AF4A0610C277376BE2A7926D7C94CA130990BF2BC09761F17
sha3_384: ce694248b8d3389c063c05dfc3ab11a33ee20d1c1267e887587d10bc2fa2e339c7491b602e05216f0476a36dd8422c77
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-06-03 22:26:51

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: FirstMet - Cracker
FileVersion: 1.0.0.0
InternalName: FirstMet - Cracker.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: FirstMet - Cracker.exe
ProductName: FirstMet - Cracker
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/HackTool.BruteForce.KH also known as:

Lionic	Trojan.Win32.Convagent.i!c
MicroWorld-eScan	Gen:Variant.MSILPerseus.184343
FireEye	Gen:Variant.MSILPerseus.184343
ALYac	Gen:Variant.MSILPerseus.184343
Alibaba	Trojan:MSIL/MalwareX.fc58388a
K7GW	Hacktool ( 00551dda1 )
K7AntiVirus	Hacktool ( 00551dda1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/HackTool.BruteForce.KH
TrendMicro-HouseCall	TROJ_GEN.R002C0WKN21
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Variant.MSILPerseus.184343
Tencent	Msil.Trojan.Msilperseus.Lkxm
Ad-Aware	Gen:Variant.MSILPerseus.184343
TrendMicro	TROJ_GEN.R002C0WKN21
McAfee-GW-Edition	RDN/Generic PWS.y
Emsisoft	Gen:Variant.MSILPerseus.184343 (B)
GData	Gen:Variant.MSILPerseus.184343
Gridinsoft	Ransom.Win32.Wacatac.sa
Arcabit	Trojan.MSILPerseus.D2D017
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.C4785102
McAfee	RDN/Generic PWS.y
MAX	malware (ai score=87)
Malwarebytes	Malware.AI.591195346
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/BruteForce.KH!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove MSIL/HackTool.BruteForce.KH?

MSIL/HackTool.BruteForce.KH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X