RiskTool.Win32.Agent malicious file

The RiskTool.Win32.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskTool.Win32.Agent virus can do?

• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• Network activity detected but not expressed in API logs

How to determine RiskTool.Win32.Agent?

File Info:
crc32: 31B985E6
md5: 2863829aaa1b093692217c2dbe5d33c5
name: bitcoin-0.11.1-win64-setup.exe
sha1: 9bb0c33e7f354b634d7afa6f578299ea640a9430
sha256: 930e74b475379ce112816ea3995d29d61eb9329f03636c7b25e08bd491dfdbf0
sha512: 1f22ed49cf6e64a397d1ca0d106ab11a8eaa2e052e7fe3e39f120e4083a862bc460c9f7f46130881934053a152e063ceceab7c9f90a555ed014ca4a1245a1529
ssdeep: 393216:mlc1977ea23n8OHDfCzefA1ZtGnPV6X1Ugz:p7zen8OHmaX8qgz
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: 
FileVersion: 0.11.1
CompanyName: Bitcoin Core project
ProductName: Bitcoin Core
ProductVersion: 0.11.1
FileDescription: 
CompanyWebsite: http://www.bitcoin.org/
Translation: 0x0000 0x0000

RiskTool.Win32.Agent also known as:

How to remove RiskTool.Win32.Agent?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.