RiskWare.NetFilter malicious file

The RiskWare.NetFilter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskWare.NetFilter virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs

How to determine RiskWare.NetFilter?


File Info:
crc32: E1F7180A
md5: 612e6c5de45b127e1134b385f8b2f593
name: 612E6C5DE45B127E1134B385F8B2F593.mlw
sha1: c767254b35c356cb405bac22cdeed4f5701ac013
sha256: 8d7376561357327f83c9835543877d0417d7b676588c83879bee6b4ffff2678c
sha512: b49abfd6224dfa7a51fb1f164e6974da1a2b35a9db2d22573ee5ed2a01a8ccb973331fdac9304fa7bd26bb67e5ba6d6b84c9478fb5d47ff73faca46b0ceef69f
ssdeep: 1536:WMltXqwc0uwziH1stUXJDyUo5kt8AW8VrHz7z6Wcc0layDRSz3OrnYUgO1J0KUA:ztXqtStoJRrWm/cDsz382O1J009tEH
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2015
InternalName: nfapi
FileVersion: 1, 4, 7, 9
ProductName: NetFilterSDK
ProductVersion: 1, 5, 0, 6
FileDescription: nfapi
OriginalFilename: nfapi.dll
Translation: 0x0000 0x04b0

RiskWare.NetFilter also known as:

Cylance	Unsafe
Zillya	Tool.NetFilter.Win32.8138
Sangfor	Malware
K7GW	Unwanted-Program ( 004d38111 )
K7AntiVirus	Unwanted-Program ( 004d38111 )
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/NetFilter.F potentially unsafe
Cynet	Malicious (score: 85)
Kaspersky	not-a-virus:NetTool.Win32.NetFilter.gn
Alibaba	NetTool:Win32/NetFilter.14a6de18
NANO-Antivirus	Trojan.Win32.NetFilter.enioph
ViRobot	Adware.Netfilter.159744
Sophos	Generic PUA MH (PUA)
Comodo	ApplicUnwnt@#tak6a077itiz
F-Secure	Adware.ADWARE/NetFilter.diukt
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
Webroot	Pua.Gen
Avira	ADWARE/NetFilter.diukt
eGambit	Generic.Malware
Antiy-AVL	Trojan/Win32.BTSGeneric
Microsoft	PUA:Win32/Presenoker
ZoneAlarm	not-a-virus:NetTool.Win32.NetFilter.gn
GData	Win32.Application.Agent.4VE2SK
McAfee	Artemis!612E6C5DE45B
MAX	malware (ai score=64)
Malwarebytes	RiskWare.NetFilter
Yandex	Trojan.Igent.bUAS7g.21
Ikarus	PUA.WebFilter
Fortinet	Riskware/NetFilter

How to remove RiskWare.NetFilter?

RiskWare.NetFilter removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X