Should I remove “MSIL/Riskware.HackTool.Agent.V”?

The MSIL/Riskware.HackTool.Agent.V is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Riskware.HackTool.Agent.V virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine MSIL/Riskware.HackTool.Agent.V?


File Info:
name: 55DE09485D3798F18343.mlw
path: /opt/CAPEv2/storage/binaries/2055b432ef9e6c6f468b0c61ee1f8d2057cb039cafb19ed2182c6bd603b638ae
crc32: D8049E48
md5: 55de09485d3798f18343c2de5840d2a3
sha1: 77cc0fede448c2d4ed4dfff8e54df08fa9ffc072
sha256: 2055b432ef9e6c6f468b0c61ee1f8d2057cb039cafb19ed2182c6bd603b638ae
sha512: ff3f974caec0e40502a3bce25860d0117dbdf756a218eaa1e1df499c0f95067825bfd308f57d9e4e598bacb40e6a96a00c139bfe5bf5c078b22875492992e93e
ssdeep: 6144:otDf1BpplURC+pNuDr3IJFxVLp6fkTtDf1BpplURC+pNuDr3I:CxBpGrjKfkpxBpG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T140D43FA3B6088D8BD46472F4D046F7BA8A515EF898AAC217BCF6BC67F0413431D2E574
sha3_384: 7c9bab241e3eb47f8b35526da93ec08fe2184ada0742ae629fa18becf8cea3f4d30d20e820e398a76951d6f2067938a2
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-10-08 20:30:00

Version Info:
Translation: 0x0000 0x04b0
CompanyName: HitmanAlharbi
FileDescription: InstaFreak
FileVersion: 1.0.0.0
InternalName: InstaFreak.exe
LegalCopyright: Copyright ©  2017
OriginalFilename: InstaFreak.exe
ProductName: InstaFreak
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Riskware.HackTool.Agent.V also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Riskware.Win32.Generic.1!c
Skyhigh	Artemis
McAfee	Artemis!55DE09485D37
Cylance	unsafe
Sangfor	Hacktool.Win32.Agent.8
BitDefenderTheta	Gen:NN.ZemsilCO.36802.Lq0@aG2xyJp
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.HackTool.Agent.V
APEX	Malicious
ClamAV	Win.Malware.Agent-6360432-0
Avast	Win32:Malware-gen
Trapmine	suspicious.low.ml.score
Google	Detected
Antiy-AVL	Trojan/Win32.BTSGeneric
Kingsoft	malware.kb.c.680
Microsoft	Program:Win32/Wacapew.C!ml
MAX	malware (ai score=99)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Rising	Malware.Undefined!8.C (CLOUD)
Ikarus	PUA.MSIL.Riskware
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/HackTool_Agent
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove MSIL/Riskware.HackTool.Agent.V?

MSIL/Riskware.HackTool.Agent.V removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X