Risk

Riskware.Agent (A) (file analysis)

Malware Removal

The Riskware.Agent (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Riskware.Agent (A) virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Riskware.Agent (A)?


File Info:

crc32: 2D34E00C
md5: 5f5115387c52402e8f145b04abe5a33c
name: 5F5115387C52402E8F145B04ABE5A33C.mlw
sha1: 760a82d0a09acea6d3a37599f0072463159f451d
sha256: e9c174427f5b6036583041f6ee0f57f63aa2f747f69edf8e5bb9460e14b9342f
sha512: b7c6de89773cd89852c63141398db6369c1207509f6b72ce8297a8f2f8e1a48d06b1e31857632ad3654198b9f47805ef3668ddf3cd00dbac9eb1eb3915ece5da
ssdeep: 192:39DIYzDDh2kXEA9oVrGiE9nfG4zyA5b3yFA7WRoaMCT41mZ3tEOoHsmN:NDI8AkXV9oVrGNdG4zyA5b3rW5MC2It
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017
Assembly Version: 1.0.0.0
InternalName: llamamaker.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: llamamaker
ProductVersion: 1.0.0.0
FileDescription: llamamaker
OriginalFilename: llamamaker.exe

Riskware.Agent (A) also known as:

K7AntiVirusTrojan ( 004de29f1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.EncoderNET.HiddenTear.1
CynetMalicious (score: 99)
CylanceUnsafe
AlibabaRansom:MSIL/Ryzerlo.6f1ec041
K7GWTrojan ( 004de29f1 )
Cybereasonmalicious.87c524
SymantecRansom.HiddenTear!g1
ESET-NOD32a variant of MSIL/Filecoder.AK
APEXMalicious
AvastWin32:Malware-gen
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Heur.Ransom.HiddenTears.1
NANO-AntivirusTrojan.Win32.Filecoder.entklg
MicroWorld-eScanGen:Heur.Ransom.HiddenTears.1
Ad-AwareGen:Heur.Ransom.HiddenTears.1
SophosTroj/Cryptear-A
ComodoMalware@#3s9ttoye7ul60
BitDefenderThetaGen:NN.ZemsilF.34170.am0@au9fWpf
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HiddenTearRekt.F117DD
McAfee-GW-EditionRansomware-FTD!5F5115387C52
FireEyeGeneric.mg.5f5115387c52402e
EmsisoftRiskware.Agent (A)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.Ryzerlo.fgqey
eGambitUnsafe.AI_Score_86%
Antiy-AVLTrojan/Generic.ASMalwS.1F570B3
MicrosoftRansom:MSIL/Ryzerlo.A
ArcabitTrojan.Ransom.HiddenTears.1
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Heur.Ransom.HiddenTears.1
McAfeeRansomware-FTD!5F5115387C52
MAXmalware (ai score=84)
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_HiddenTearRekt.F117DD
YandexTrojan.Filecoder!Hv2e3Xp1LwA
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.1728101.susgen
FortinetMSIL/Filecoder.AK!tr.ransom
AVGWin32:Malware-gen

How to remove Riskware.Agent (A)?

Riskware.Agent (A) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment