Win32/RiskWare.HackTool.Agent_AGen.U removal

The Win32/RiskWare.HackTool.Agent_AGen.U is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/RiskWare.HackTool.Agent_AGen.U virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Win32/RiskWare.HackTool.Agent_AGen.U?


File Info:
name: 1C371067F9DAF9001E86.mlw
path: /opt/CAPEv2/storage/binaries/801f70a13216971d272ab27ba4eb8b8b1b22c55e7a6676815bb95eec6281c80d
crc32: 0479BE1B
md5: 1c371067f9daf9001e86759a713edadc
sha1: 409de47814c3f460b5d6993a45d4f48799ecbddd
sha256: 801f70a13216971d272ab27ba4eb8b8b1b22c55e7a6676815bb95eec6281c80d
sha512: cadc8daf640ff561e4cd316266a9b499885bdf328e31a862fc043d5663fa3859142beceb9e313d853e3f6e9f7ef637f7966b416ffc320566085a8bc8d451a677
ssdeep: 6144:oYhdyBnUfvwLrWzuzsxZR+DuUueO4fmoeUvpNnr:oYCBn4vjoDj
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T143B4E003BB449B14C97C353A82FB292D63A1F5CB0771991FDF057AAB1CD62A69CCC246
sha3_384: 81ae7c9abdef3bdab87c079d9df157899750570b4e46d55dfeef7a2ca206243fbe39682c6b3bc857ae3d98742a8c0293
ep_bytes: ff250020400000000000000000000000
timestamp: 2058-08-16 13:06:34

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: kutiyrghdfgsdf
FileVersion: 3.5.6.2
InternalName: qsrtrtqwtdyasYUADFGA.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: qsrtrtqwtdyasYUADFGA.exe
ProductName: qsedadasda
ProductVersion: 3.5.6.2
Assembly Version: 9.7.8.1

Win32/RiskWare.HackTool.Agent_AGen.U also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:Malware-gen
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Mardom.IN.20
FireEye	Gen:Trojan.Mardom.IN.20
VIPRE	Gen:Trojan.Mardom.IN.20
Sangfor	Suspicious.Win32.Save.a
BitDefenderTheta	Gen:NN.ZemsilF.36804.Em0@amaGChf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RiskWare.HackTool.Agent_AGen.U
APEX	Malicious
BitDefender	Gen:Trojan.Mardom.IN.20
Avast	Win32:Malware-gen
Emsisoft	Gen:Trojan.Mardom.IN.20 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=85)
Arcabit	Trojan.Mardom.IN.20
GData	Gen:Trojan.Mardom.IN.20
Google	Detected
ALYac	Gen:Trojan.Mardom.IN.20
Ikarus	Trojan.Win64.Agent
Fortinet	Riskware/HackTool_Agent_AGen
DeepInstinct	MALICIOUS

How to remove Win32/RiskWare.HackTool.Agent_AGen.U?

Win32/RiskWare.HackTool.Agent_AGen.U removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X