How to remove “RiskTool.Win32.Agent.aqgi”?

The RiskTool.Win32.Agent.aqgi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.Agent.aqgi virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine RiskTool.Win32.Agent.aqgi?


File Info:
name: F9A47E6211D139FCCEE1.mlw
path: /opt/CAPEv2/storage/binaries/496ffd706afc898d3b86815fa5807776b7290048b3cf54039ecab14188019fe0
crc32: B907ECA9
md5: f9a47e6211d139fccee1dd213e5cbcfb
sha1: a9d77f4a6ca0a95e1952777871169298da09c85a
sha256: 496ffd706afc898d3b86815fa5807776b7290048b3cf54039ecab14188019fe0
sha512: fcbc08dca0a116fc79e28c777bff32663236b876021344f4b3aa27a227b45906655fb7a093776b9b42f84074ed7d4048d2d74e7ee540b937555fb710b2143ff3
ssdeep: 6144:JUjWN02WlXonwZMdn0UqxLPIn3vMQr+xavX8RPKwk2pyyEwzrw5KN9uILFDEZMWo:JUu2lSHEzI3Ui+xavX8RPKwk2ysw529Z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14274E813F7746008F1138170AAFAA5725D2ABC36041EEC5BB740AA9D7571A83ADF172F
sha3_384: 5be94b19fd4ab5a90b7b327bc0b45cd32c1a34785633682394a37efc92eae309d0e68accab4bc8d7073602a8f4d2b9e7
ep_bytes: 6858334000e8f0ffffff000000000000
timestamp: 2017-10-23 19:13:19

Version Info:
Translation: 0x0409 0x04b0
CompanyName: JobDiva
ProductName: MinerSetup
FileVersion: 1.03.0225
ProductVersion: 1.03.0225
InternalName: MinerSetup
OriginalFilename: MinerSetup.exe

RiskTool.Win32.Agent.aqgi also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Agent.1!c
Skyhigh	BehavesLike.Win32.BadFile.fm
McAfee	Artemis!F9A47E6211D1
Cylance	unsafe
Sangfor	Riskware.Win32.Agent.Vdpu
APEX	Malicious
Kaspersky	not-a-virus:RiskTool.Win32.Agent.aqgi
Alibaba	RiskWare:Win32/Generic.92fbb2e7
Rising	Hacktool.Agent!8.335 (CLOUD)
DrWeb	BACKDOOR.Trojan
Zillya	Tool.Agent.Win32.128657
FireEye	Generic.mg.f9a47e6211d139fc
Jiangmin	RiskTool.Agent.nv
Antiy-AVL	RiskWare[RiskTool]/Win32.Agent
ZoneAlarm	not-a-virus:RiskTool.Win32.Agent.aqgi
DeepInstinct	MALICIOUS
TrendMicro-HouseCall	TROJ_GEN.R002H07G223
MaxSecure	Trojan.Malware.11533434.susgen
Fortinet	Riskware/Agent
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove RiskTool.Win32.Agent.aqgi?

RiskTool.Win32.Agent.aqgi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X