Categories: Risk

RiskWare.PortScanner malicious file

The RiskWare.PortScanner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskWare.PortScanner virus can do?

Behavioural detection: Executable code extraction – unpacking
A file was accessed within the Public folder.
Authenticode signature is invalid
CAPE detected the shellcode patterns malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine RiskWare.PortScanner?


File Info:
name: 5C7050E14E090C71B337.mlwpath: /opt/CAPEv2/storage/binaries/afa241787fde424249c8b445b1d66f40de8b08bc7bed7bef97c1fec4b069e53bcrc32: 38A71B3Amd5: 5c7050e14e090c71b3373aeb2ee13914sha1: b64e57d7dd7e8b500ad53800aad4d132a1a1bd36sha256: afa241787fde424249c8b445b1d66f40de8b08bc7bed7bef97c1fec4b069e53bsha512: 1868cfbc01a94d095690d69cd09661e88d65359fba589a7cd775db9d0b9784201631fe65e1f84b3e3dab8f7814af22fb5ad4d6773473b67a270fbeb9171d6682ssdeep: 768:FMnOSTQgJxCCTyyS/py5GT3LYSYNzKolqPB4jrYdTABGWzOBhCHElKa5op+zgfjp:FMOAZWpKgLYqouWYdWhOSklKM0xtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19F53F75A2EE0C473E272427406B35FA2ABFBBE4157318B8B5F147E3D6874611ED1A312sha3_384: ddec81f7a5398f5fa2d654d8d401989eed4ebb43ac354046a75f20db0059e0e58b3b781b0fce777d51da538e9bca7cecep_bytes: 558bec6aff68c0974000681086400064timestamp: 2000-11-13 03:53:53
Version Info:
Comments: CompanyName: Foundstone Inc.FileDescription: SuperScanFileVersion: 3, 0, 0, 0InternalName: SuperScanLegalCopyright: Copyright © 2000 FoundstoneLegalTrademarks: OriginalFilename: scanner.exePrivateBuild: ProductName: SuperScanProductVersion: 3, 0, 0, 0SpecialBuild: Translation: 0x0409 0x04b0

RiskWare.PortScanner also known as:

Elastic	malicious (high confidence)
Cylance	unsafe
Symantec	SuperScan
ESET-NOD32	Win32/NetTool.SuperScan.AA potentially unsafe
ClamAV	Win.Trojan.Agent-6240252-0
NANO-Antivirus	Riskware.Win32.NetTool.itomeu
Sophos	SuperScan Port Scanner (PUA)
Google	Detected
Varist	W32/ABTrojan.AFXW-7205
Antiy-AVL	RiskWare[NetTool]/Win32.SuperScan
Kingsoft	Win32.Troj.Undef.a
Xcitium	Malware@#3bwygm3k0l0oh
VBA32	BScope.Adware.Presenoker
Malwarebytes	RiskWare.PortScanner
Rising	Trojan.DL.Win32.Banload.cfz (CLASSIC)
MaxSecure	Trojan.Malware.73376928.susgen
Fortinet	Riskware/NetTool_SuperScan
DeepInstinct	MALICIOUS
alibabacloud	Hacktool:Win/NetTool.SuperScan