Risk

RiskTool.Win32.KuaiZip.bfu removal tips

Malware Removal

The RiskTool.Win32.KuaiZip.bfu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What RiskTool.Win32.KuaiZip.bfu virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Attempts to modify browser security settings

Related domains:

tips.kpzip.com
tj.kpzip.com

How to determine RiskTool.Win32.KuaiZip.bfu?


File Info:

crc32: FC123999
md5: 38ccab4e9cca592b6e52e22d2281f57c
name: applenews-3.exe
sha1: 07de328d36111400da4498935f8d6e8ef3b71294
sha256: 3e8b2f2c46b5bf8d720925bc88e762533d9d2f20e9ab540ecbf01a1cbb03db34
sha512: aa8c466785283a5fb3393bbdc69d6e2160cc1cfd82fd243c0b077f879b6422d21883388c12fa8df3ad46b4bd7c64417d41af55a9495005efbdbc284dc4af7326
ssdeep: 24576:aZCU1t7oT1iSfNNCXrzynyo30YuWzLS6tACoGLovTiFBqwRlJV+MPZskK424DBG:uowGSXKVpuSiWoeKwRlJV+MPZskPJDB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2010-2019
ProductVersion: 1.0.0.1
ProductName: x4fe1x606fx63d0x9192
FileVersion: 1.0.0.1
FileDescription: x4fe1x606fx63d0x9192
Translation: 0x0804 0x04b0

RiskTool.Win32.KuaiZip.bfu also known as:

MicroWorld-eScanGen:Variant.Ulise.85240
McAfeePUP-XJC-EW
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Ulise.85240
K7GWRiskware ( 0040eff71 )
SymantecML.Attribute.HighConfidence
GDataGen:Variant.Ulise.85240
Kasperskynot-a-virus:RiskTool.Win32.KuaiZip.bfu
AlibabaRiskTool:Win32/KuaiZip.53dde704
RisingAdware.AdPop!1.BF3B (CLASSIC)
Endgamemalicious (high confidence)
SophosKuaiZip (PUA)
ComodoApplicUnwnt@#3vbpked177ae
F-SecureTrojan.TR/Agent.kqvuj
McAfee-GW-EditionPUP-XJC-EW
FireEyeGen:Variant.Ulise.85240
EmsisoftGen:Variant.Strictor.212675 (B)
IkarusAdWare.KuziTui
CyrenW32/Trojan.WYKG-0642
JiangminRiskTool.KuaiZip.gc
WebrootW32.Malware.Gen
AviraTR/Agent.kqvuj
MicrosoftPUA:Win32/Presenoker
ArcabitTrojan.Ulise.D14CF8
ZoneAlarmnot-a-virus:RiskTool.Win32.KuaiZip.bfu
AhnLab-V3PUP/Win32.AdLoad.R296927
VBA32BScope.Adware.Burden
ALYacGen:Variant.Ulise.85240
MAXmalware (ai score=86)
Ad-AwareGen:Variant.Ulise.85240
PandaTrj/CI.A
ESET-NOD32a variant of Win32/KuaiZip.U potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R03BC0PKM19
YandexRiskware.KuaiZip!
SentinelOneDFI – Malicious PE
FortinetRiskware/KuaiZip
AVGFileRepMalware [PUP]
AvastWin32:UnwantedSig [PUP]

How to remove RiskTool.Win32.KuaiZip.bfu?

RiskTool.Win32.KuaiZip.bfu removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment