Should I remove “RiskTool.Win32.HideProc.rv”?

The RiskTool.Win32.HideProc.rv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.HideProc.rv virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine RiskTool.Win32.HideProc.rv?


File Info:
name: 3F8D113CA68D97062AE7.mlw
path: /opt/CAPEv2/storage/binaries/73085955eee63c01520c49f802b10a435eb183ebc73816acd2a6b0ab6bcb5b7d
crc32: 340DC954
md5: 3f8d113ca68d97062ae7d9e6e2e24cb2
sha1: dbe55fc375d08f4231db74ad6b23ea61eaafeb71
sha256: 73085955eee63c01520c49f802b10a435eb183ebc73816acd2a6b0ab6bcb5b7d
sha512: dd76f21303d2387a9e8bd0a6cfa2346858cd7a16ce11a64cfd1e5da12126645cce804ba08ae195ff648f7a07c152951e1bc3ddcdff86b5eb1558aec464f64037
ssdeep: 384:VJ8EDVO34BeUCPV4yYc+BB0KiTs3dfzTPV0JoDZuSehDFH9zH12bwl6i:fLcKEqyLABFiTs39fP+izehxdzV20l6i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1717218329182583EF627AB7AFC25512F7001BF501B183DA85FE81C4C5F5EBE374062A2
sha3_384: 66c10f2e9e68972c3f8a5b4879476b3088898f89af755334f0dd71498ec4a5648129e9808a76773f525c01d3e2af385a
ep_bytes: 8b442408560fb730037004eb028bf08d
timestamp: 2007-06-20 05:46:07

Version Info:
0: [No Data]

RiskTool.Win32.HideProc.rv also known as:

Bkav	W32.AIDetect.malware2
Lionic	Riskware.Win32.HideProc.1!c
DrWeb	Tool.HideProc.27
FireEye	Generic.mg.3f8d113ca68d9706
Cylance	Unsafe
Sangfor	Riskware.Win32.HideProc.rv
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	RiskWare:Win32/HideProc.901b00c8
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	Trojan.Gen.MBT
Kaspersky	not-a-virus:RiskTool.Win32.HideProc.rv
NANO-Antivirus	Riskware.Win32.HideProc.crvalg
Avast	Win32:HideProc-N [PUP]
Sophos	Generic PUA NL (PUA)
McAfee-GW-Edition	Artemis!PUP
Ikarus	Virus.WinNT.RootkitDrv
GData	Win32.Application.Agent.WMDV52
Jiangmin	RiskTool.HideProc.t
ZoneAlarm	not-a-virus:RiskTool.Win32.HideProc.rv
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
SentinelOne	Static AI – Suspicious PE
McAfee	Artemis!3F8D113CA68D
APEX	Malicious
Rising	Trojan.Generic@AI.87 (RDML:ey2AuRRxSpHCl9TjyGBOdg)
AVG	Win32:HideProc-N [PUP]

How to remove RiskTool.Win32.HideProc.rv?

RiskTool.Win32.HideProc.rv removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X