Should I remove “RiskWare.OpenBullet”?

The RiskWare.OpenBullet is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskWare.OpenBullet virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid

How to determine RiskWare.OpenBullet?


File Info:
name: DCCA3FEF5839FC6AE858.mlw
path: /opt/CAPEv2/storage/binaries/0401b5df86c4ce199f97456b4c4463be247b81652cfc7df66c14e16ce9a3c1cf
crc32: 6191D4FF
md5: dcca3fef5839fc6ae8581c93ba50211e
sha1: 61e2f7552ceffb8244d5696aeba91166e7796bf1
sha256: 0401b5df86c4ce199f97456b4c4463be247b81652cfc7df66c14e16ce9a3c1cf
sha512: 08ce2eda18b905c4d7cf157a73e57d50bd5d81ec98df1ddda9d808d5eeee49e868c2b637e9e3963c369ada438d2f66d206cd353588ef0c11e52b14c56bff344f
ssdeep: 12288:mb//iJ055/2m7RpqyAIGWfNUEBVs+MuEIotfRg2v5iy4dOBDiSH8uCfmcV1T+5E8:mb/C05p2wRpnGW9kNhtfK2v5iVOhsDfY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100F42314E36AF067E690473A02758B374EB95024CFB0BE973AA03D6F34F72C495AA591
sha3_384: 6a4c0bf5cf9e3cfd4e59f768773ce979861218d1750c410aba849fdd701be63b3ef306cab9f159c5738f4cc6b73bcedc
ep_bytes: 558bec81ecf40300005356576a205f33
timestamp: 2021-09-25 21:57:46

Version Info:
0: [No Data]

RiskWare.OpenBullet also known as:

Bkav	W32.AIDetect.malware1
CAT-QuickHeal	Trojan.PupHacktool
Malwarebytes	RiskWare.OpenBullet
K7GW	Riskware ( 0058ba6d1 )
K7AntiVirus	Riskware ( 0058ba6d1 )
Cyren	W32/Trojan.YMDF-1859
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Riskware.OpenBullet.A
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.MSILHeracles.11475
MicroWorld-eScan	Gen:Variant.MSILHeracles.11475
Sophos	Generic ML PUA (PUA)
TrendMicro	HackTool.MSIL.OpenBullet.A
McAfee-GW-Edition	BehavesLike.Win32.ICLoader.bc
FireEye	Generic.mg.dcca3fef5839fc6a
Emsisoft	Gen:Variant.MSILHeracles.11475 (B)
GData	Gen:Variant.MSILHeracles.11475
Antiy-AVL	Trojan/Generic.ASMalwS.35207E7
Arcabit	Trojan.MSILHeracles.D2CD3
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.Generic.R449467
ALYac	Gen:Variant.MSILHeracles.11475
MAX	malware (ai score=84)
Panda	PUP/Hacktool
TrendMicro-HouseCall	HackTool.MSIL.OpenBullet.A
SentinelOne	Static AI – Malicious PE
Cybereason	malicious.f5839f

How to remove RiskWare.OpenBullet?

RiskWare.OpenBullet removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X