What is "RiskTool.Win32.Disabler.mh"?

The RiskTool.Win32.Disabler.mh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskTool.Win32.Disabler.mh virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine RiskTool.Win32.Disabler.mh?


File Info:
crc32: 19A0565F
md5: a65f3a8f6be152bbaf019bf3f6fc8ec2
name: all.exe
sha1: 9b206fb497cb774e76195c074c792daad708004d
sha256: c7d47d2404b4f001694ec962a0ba3e6258c2c9f8bdfbfe116e66a6f359bb14dd
sha512: 60033ae1b5ac7ada2ea5f385da5b46b947248e02f1bb3434a45cd600999b1e118d2d45ffa4ff13d7bf03b0e70ab77e0ab5f5bba0388f594832d3706268c102bb
ssdeep: 98304:4Xz+uhgSLapFDhTA+O4xjNY7OJSavHmOSu0rJtkznS0/wDQ9+UCAGRBDkYxPG3s7:gKuhpapFDWSY7OYaOOX01qzn9wDVHjNB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: lyo 2020                                                                                            
FileDescription: all.exe 2020 Installation                                   
FileVersion: 2020                
Comments: 
CompanyName: lyo 2020                                                    
Translation: 0x0409 0x04e4

RiskTool.Win32.Disabler.mh also known as:

Bkav	W32.AIDetectVM.malware2
FireEye	Generic.mg.a65f3a8f6be152bb
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_60% (D)
Invincea	heuristic
TotalDefense	Win32/Jorik.KJ
APEX	Malicious
Kaspersky	not-a-virus:RiskTool.Win32.Disabler.mh
Sophos	BlueLife Windows Defender Control (PUA)
DrWeb	Trojan.Siggen6.24541
Antiy-AVL	Trojan/Win32.Agent
Microsoft	Trojan:Win32/Wacatac.C!ml
eGambit	Unsafe.AI_Score_95%

How to remove RiskTool.Win32.Disabler.mh?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “RiskTool.Win32.Disabler.mh”?