Win32/RiskWare.HackTool.Agent_AGen.M removal instruction

The Win32/RiskWare.HackTool.Agent_AGen.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/RiskWare.HackTool.Agent_AGen.M virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Win32/RiskWare.HackTool.Agent_AGen.M?


File Info:
name: E4057578A1F46CAFFD26.mlw
path: /opt/CAPEv2/storage/binaries/d7f9239adb493fb563657c1a172da7d9457424cf8ea94e6e572298add626333e
crc32: BBA27C61
md5: e4057578a1f46caffd261e355631cc9b
sha1: a48652a329dfe9d57da09519ab7540067b3fc101
sha256: d7f9239adb493fb563657c1a172da7d9457424cf8ea94e6e572298add626333e
sha512: f645e1c4960f8799fd9a1eeb414cf26b3e879e55b57104a6df63d82748eda55c8b47e92a8a6cf0b17c262114ba8bc1c24a24eedd8438e27539b3d2875b8f7f95
ssdeep: 1536:+ToaFPbfsuDjkbqYoU4robQ+6suDcId42wI:+ToaJb0IjkbqYoUqsQTDU2wI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9732AA033EB8B24F5FA9BF5182E51C5537DF4866422EE680EF164CE18A7FD04914E63
sha3_384: ce908f52433dfca8eed1323f9cb8f0e5de1418841a8849420e453ed48a01370f109e62476bce7f06798dff0d9af6134e
ep_bytes: ff250020400000000000000000000000
timestamp: 2079-02-21 12:27:40

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Loader Injector
FileVersion: 1.0.0.0
InternalName: Loader Injector.exe
LegalCopyright: Copyright ©  2023
LegalTrademarks: 
OriginalFilename: Loader Injector.exe
ProductName: Loader Injector
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Win32/RiskWare.HackTool.Agent_AGen.M also known as:

Elastic	malicious (moderate confidence)
Malwarebytes	RiskWare.Injector.MSIL
ESET-NOD32	a variant of Win32/RiskWare.HackTool.Agent_AGen.M
APEX	Malicious
Paloalto	generic.ml
Avast	FileRepMalware [Misc]
McAfee-GW-Edition	BehavesLike.Win32.Generic.lh
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
McAfee	Artemis!E4057578A1F4
Cylance	unsafe
Rising	Hacktool.Agent!8.335 (CLOUD)
Ikarus	Trojan-Downloader.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/HackTool_Agent_AGen
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Win32/RiskWare.HackTool.Agent_AGen.M?

Win32/RiskWare.HackTool.Agent_AGen.M removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X