Risk

RiskTool.Win32.KuaiZip.bff removal

Malware Removal

The RiskTool.Win32.KuaiZip.bff is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What RiskTool.Win32.KuaiZip.bff virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Attempts to modify browser security settings

Related domains:

tips.kpzip.com
tj.kpzip.com

How to determine RiskTool.Win32.KuaiZip.bff?


File Info:

crc32: E1CEBCAB
md5: 618e92ca41bcdac4095b3106704c0680
name: applenews-1.exe
sha1: 6fdb6d96c9c0c944da2fede2b45d573ba06d5abc
sha256: 20a6a315b0400503094cba0c21769f8b089b2e95f332bdcb5a8c19f565da1f07
sha512: 8c0f5fa0f903173f91eb9c3224080ce7ff1f32f6226f6dce866d356b90920ec827c726a27d69e782d5129082782399b720fe2ac5434e492b7f2c1c259d1c4fd5
ssdeep: 24576:4ZCU1t7oT1iSfNNCXrzynyo30YuWzLS6tACoGLovTiFBqwRlJV+MPZskK424DBG:YowGSXKVpuSiWoeKwRlJV+MPZskPJDB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2010-2019
ProductVersion: 1.0.0.1
ProductName: x4fe1x606fx63d0x9192
FileVersion: 1.0.0.1
FileDescription: x4fe1x606fx63d0x9192
Translation: 0x0804 0x04b0

RiskTool.Win32.KuaiZip.bff also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanGen:Variant.Ulise.85240
FireEyeGeneric.mg.618e92ca41bcdac4
CAT-QuickHealPUA.AgentRI.S9669739
McAfeePUP-XJC-EW
MalwarebytesPUP.Optional.Kuaizip
K7AntiVirusAdware ( 0055caed1 )
BitDefenderGen:Variant.Ulise.85240
K7GWAdware ( 0055caed1 )
TrendMicroTROJ_GEN.F0CBC0UKE19
APEXMalicious
AvastWin32:PUPX-gen [PUP]
GDataGen:Variant.Ulise.85240
Kasperskynot-a-virus:RiskTool.Win32.KuaiZip.bff
AlibabaRiskWare:Win32/KuaiZip.e8b78389
RisingAdware.AdPop!1.BF3B (CLOUD)
Ad-AwareGen:Variant.Ulise.85240
EmsisoftGen:Variant.Ulise.85240 (B)
F-SecureTrojan.TR/Agent.kqvuj
DrWebProgram.Kuaizip.6
McAfee-GW-EditionKuaiZip
SophosKuaiZip (PUA)
CyrenW32/Trojan.LWWV-0461
MaxSecureTrojan.Malware.74667612.susgen
AviraTR/Agent.kqvuj
Antiy-AVLRiskWare[RiskTool]/Win32.KuaiZip
Endgamemalicious (high confidence)
ArcabitTrojan.Ulise.D14CF8
ZoneAlarmnot-a-virus:RiskTool.Win32.KuaiZip.bff
MicrosoftPUA:Win32/KuaiZip
AhnLab-V3PUP/Win32.AdLoad.R296927
ALYacGen:Variant.Ulise.85240
MAXmalware (ai score=85)
VBA32BScope.Adware.Burden
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/KuaiZip.U potentially unwanted
TrendMicro-HouseCallTROJ_GEN.F0CBC0UKE19
YandexRiskware.KuaiZip!
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_80%
FortinetRiskware/KuaiZip
WebrootW32.Malware.Gen
AVGFileRepMalware [PUP]

How to remove RiskTool.Win32.KuaiZip.bff?

RiskTool.Win32.KuaiZip.bff removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment