How to remove “RiskWare.Script.PWRS.Generic”?

The RiskWare.Script.PWRS.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskWare.Script.PWRS.Generic virus can do?

Authenticode signature is invalid

How to determine RiskWare.Script.PWRS.Generic?


File Info:
name: A8A179E96C248A8398E7.mlw
path: /opt/CAPEv2/storage/binaries/14ac656714beb7559753f6e3b6c01f0c201381007e3af290701407179f3e7c6d
crc32: 4C0BA4C6
md5: a8a179e96c248a8398e7c0ae096141f6
sha1: 8a4d216c0936d06b82004c4e51a6173003882294
sha256: 14ac656714beb7559753f6e3b6c01f0c201381007e3af290701407179f3e7c6d
sha512: 9d767546a44c11a5b59275a6f679fcc7a01061f371de9cb6b053d3fba994373bf98f05d37f95aac0984a651463843ff1079038c7680bba4b96217402e6c09149
ssdeep: 3072:ZI6Un9qqvFaADfL94aypn5Uag0Z4cwFPpmA2KY2/G:69qqvFaAV4aylRqcwF92KY2/G
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DD76375764F710EA605782755FCCF8FF86B9E82A1A6E7AB31140E752CF357984A230B0
sha3_384: 9d773716f1ef2fe23ed165fbf08971c371e27a7c92a271dc4b3900b5b9d3c9eaeb4758c31a3678123ef3e4121dcfab7c
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-05-16 08:58:43

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: p.exe
LegalCopyright: © 2023 hcortial
LegalTrademarks: ™ 
OriginalFilename: p.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

RiskWare.Script.PWRS.Generic also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Dropper.Mdrop-9987013-0
FireEye	Generic.mg.a8a179e96c248a83
Malwarebytes	RiskWare.Script.PWRS.Generic
CrowdStrike	win/malicious_confidence_70% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36350.@p0@aqbzIRi
APEX	Malicious
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Win32.SGeneric
Google	Detected
Fortinet	PossibleThreat
DeepInstinct	MALICIOUS

How to remove RiskWare.Script.PWRS.Generic?

RiskWare.Script.PWRS.Generic removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X