About “RiskWare.Agent.Generic” infection

The RiskWare.Agent.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskWare.Agent.Generic virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine RiskWare.Agent.Generic?


File Info:
name: E53F85F8443DCE0FBBDD.mlw
path: /opt/CAPEv2/storage/binaries/f3229300489a2c3b41d08c834e08371bc50b7beb832c64d88c577196237b3f76
crc32: CF0F30AC
md5: e53f85f8443dce0fbbdd6c19c75055b5
sha1: 4b2e9ce73c0e0f33f45925d5a9f4f4a1cddef05f
sha256: f3229300489a2c3b41d08c834e08371bc50b7beb832c64d88c577196237b3f76
sha512: c5f305fb569a411dc4120e6eda0a3248c63101bc6e5ee194255d2d90b93e4f9b99ffc05ac8327702f50a699f31e4f98cde247dc0ff74db4f61d04221338b3d1d
ssdeep: 1536:eAsvmeOrco4HQmP1bYj7SqaZKHG3yZGWfo:TfNmbYjmq38yvQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16F734B01768BC325C5A945F6C0E3946002F2AF4BAA37D75B3D84328D5F72BCA9A52BC5
sha3_384: accf756cdf4cecd9a181a04d62da5c6b423b3df234bc628b7ea29aaca2b803188c0c7ed30f06a3ccf7d4b01627145744
ep_bytes: ff250020400000000000000000000000
timestamp: 2041-01-25 21:21:05

Version Info:
Translation: 0x0000 0x04b0
Comments: In Game
CompanyName: AccuGame
FileDescription: AccuGame
FileVersion: 1.0.0.0
InternalName: WpfApp1.exe
LegalCopyright: Copyright ©  2023
LegalTrademarks: 
OriginalFilename: WpfApp1.exe
ProductName: AccuGame
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

RiskWare.Agent.Generic also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.349369
FireEye	Gen:Variant.Lazy.349369
Malwarebytes	RiskWare.Agent.Generic
Cybereason	malicious.8443dc
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.349369
Emsisoft	Gen:Variant.Lazy.349369 (B)
VIPRE	Gen:Variant.Lazy.349369
GData	Gen:Variant.Lazy.349369
Arcabit	Trojan.Lazy.D554B9
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
BitDefenderTheta	Gen:NN.ZemsilF.36250.em0@aqasMoo
MAX	malware (ai score=82)
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove RiskWare.Agent.Generic?

RiskWare.Agent.Generic removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X