About “Win32/RiskWare.HackTool.Agent.G” infection

The Win32/RiskWare.HackTool.Agent.G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/RiskWare.HackTool.Agent.G virus can do?

Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/RiskWare.HackTool.Agent.G?


File Info:
name: 1D92DBF1569A847C2E4B.mlw
path: /opt/CAPEv2/storage/binaries/cbb8c17a0b6a53609d424a647d126260c14008b1e6b24744c1a71a018b7c82d7
crc32: 1B55FC34
md5: 1d92dbf1569a847c2e4bf3821a0f24e4
sha1: fa86aed0511daaad23b5e191f8caa431d811a041
sha256: cbb8c17a0b6a53609d424a647d126260c14008b1e6b24744c1a71a018b7c82d7
sha512: 39d2abad365b524916b179436efb2c829fdb410c9456feed98eb4fc1c31da91a7da855206d31b9cfab3e551e8443898f8fc87f611246dc6e1be597b02f633fcf
ssdeep: 12288:G+ebAohyXbJXtrPqR+eU5okQnJp6yNB2MPjQ979rMo:G6bJdrPqvU5a6yNB2EQ9pMo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11DC5D416E585C0B2DC311231D0ADC6F08B2A2DBC1E14727BA6D73EAFB9317932D52A35
sha3_384: aeedd626f39411ec316b4ec06d39b333304bebd6084db12eb7880bae688f6a472f712e6d1bb0d2e7e32c8261bd7d100a
ep_bytes: e8a85c0000e979feffff3b0dc0ee4300
timestamp: 2011-12-08 20:12:56

Version Info:
CompanyName: warezstore.com
FileDescription: WS Downloader
FileVersion: 1.0.0.1
InternalName: downloader.exe
LegalCopyright: (c) warezstore.com
OriginalFilename: downloader.exe
ProductName: WS Downloader
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Win32/RiskWare.HackTool.Agent.G also known as:

Bkav	W32.Common.B5905C30
Lionic	Hacktool.Win32.Generic.3!c
McAfee	GenericRXAA-AA!1D92DBF1569A
Cylance	unsafe
Sangfor	Hacktool.Win32.Agent.Vak4
Cybereason	malicious.0511da
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/RiskWare.HackTool.Agent.G
APEX	Malicious
Zillya	Tool.HackTool.Win32.277
Webroot	W32.Trojan.Gen
Antiy-AVL	RiskWare/Win32.Agent
VBA32	Trojan.Agentb
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware/Suspicious
Yandex	RiskWare.HackTool!B98DcTio2SU
Ikarus	PUA.RiskWare.Hacktool
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	Riskware/HackTool_Agent

How to remove Win32/RiskWare.HackTool.Agent.G?

Win32/RiskWare.HackTool.Agent.G removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X