RiskTool.MSIL.Agent.kih removal tips

The RiskTool.MSIL.Agent.kih is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.MSIL.Agent.kih virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine RiskTool.MSIL.Agent.kih?


File Info:
name: 5BA3086DA20245CCE4F0.mlw
path: /opt/CAPEv2/storage/binaries/bf117acaa0b57c2640ea60d29a2a43fe88e53ab0152eb14d43b31f8d468d1b49
crc32: DB5A5F0B
md5: 5ba3086da20245cce4f0d0f869c4c2e4
sha1: 856b7b39bed6c0ec62d43473b27a6254813316cf
sha256: bf117acaa0b57c2640ea60d29a2a43fe88e53ab0152eb14d43b31f8d468d1b49
sha512: a9472632e0df2dc9c1d85ab628f663ffd027cc606de7a3d423e67b7ba3122000e8140b2aa94d63990631874c8d48e6cb9e56e746d2f190223fdb00e257d39783
ssdeep: 192:kRF1VKb3jWbcwSgg/wLCYLk853s1kLBLYLRVA+fc6mBfOi:MF1VKb3jIRSg+wLFLH3s1kLBLYLRVVfT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15202FA99E7B89B76C9B74F316CA362500BBAE516DC52C65E6880104BDF133114EA3BF2
sha3_384: e9818152e68682a7afcd7f39354765e93c1745eed0b887829cc562f49292163a56fb37db258648c5648c55ca1bf98901
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-02-25 12:26:07

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsFormsApplication2
FileVersion: 1.0.0.0
InternalName: WindowsFormsApplication2.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: WindowsFormsApplication2.exe
ProductName: WindowsFormsApplication2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

RiskTool.MSIL.Agent.kih also known as:

Bkav	W32.Common.ACE997CD
Lionic	Riskware.Win32.Agent.1!c
Skyhigh	Artemis
McAfee	Artemis!5BA3086DA202
Cylance	unsafe
Sangfor	Riskware.Msil.Agent.Vryz
Alibaba	RiskWare:MSIL/Generic.35d43f20
Kaspersky	not-a-virus:RiskTool.MSIL.Agent.kih
Sophos	Generic Reputation PUA (PUA)
Antiy-AVL	RiskWare[RiskTool]/MSIL.Agent
Microsoft	PUA:Win32/Puamson.A!ac
ZoneAlarm	not-a-virus:RiskTool.MSIL.Agent.kih
VBA32	TScope.Trojan.MSIL
Rising	PUA.Presenoker!8.F608 (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Agent
DeepInstinct	MALICIOUS

How to remove RiskTool.MSIL.Agent.kih?

RiskTool.MSIL.Agent.kih removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X